December 2003 - cypherpunks-legacy

Re: His and Her Anarchies
by drose＠AZStarNet.com 17 Dec '03

17 Dec '03

Dale Thorn <dthorn(a)gte.net> wrote: [...] >While many, many >women have harrassed me on the road for my driving, they (unlike men, w/o exception) >have *never* tried to threaten me directly, as have hundreds of men. Might all these hundreds of threatening men and many, many harassing women be trying to tell you something? [...] >I would suggest to any man that if he lived >in a society where a whole class of humans (i.e., female) were more aggressive and >confrontational, more domineering, etc. than he and nearly every other man he knew, >he would probably learn how best to get along with that other class of persons without >constantly butting heads with them. Dale Thorn, meet Oprah, RuPaul, Hillary Rotten, Roseanne, Andrea Dworkin, Winnie Mandella, etc. Now back to S. Logan, Vulis, AP, whatever.

2 1

Apartment complex burnt down...
by drose＠AZStarNet.com 17 Dec '03

17 Dec '03

On Sat, 9 Nov 1996, John Anonymous MacDonald wrote: >Suppose Bob lives in an apartment complex. By accident the whole building >burns down. > >Bob manages to escape, but all his papers, including passport, IDs, >credit cards, acount numbers, etc etc gets destroyed. > >What can Bob do? Would the government help him? Why? >It seems like he'd be in a really unfavorable position... Umm-hmmm. Calling Sunkyong Moon-Yip (sp?): List please off him getts.

1 0

ideal secure personal computer system
by tom bryce 17 Dec '03

17 Dec '03

Here's a question: if one were designing for oneself a secure personal computer system, for use in, say, word processing, spreadsheet, communications, the usuals - what system would one purchase and how would one set it up? For example, on the Mac I would envision this as the ideal system: (1) Get a power mac (2) Partition the hard drive into two partitions: install the system folder on one and a copy of CryptDisk make this the startup partition and make it READ ONLY with aliases to folders you want to be modiyfable (such as Eudora Folder in the sys folder) place these folders on the encrypted partition (3) Completely fill the other partition with a CryptDisk file so there is no room for other stuff to be written. Adjust the partition size if needed. (4) Install a screen saver (such as shareware Eclipse) that will password lock the screen after a few minutes of inactivity, and set CryptDisk to dismount the external partition after a few minutes of inactivity (or longer) This would be a basic setup. If one had more complex ideas, such as setting it up so casual onlookers would not notice the system was protected, you could do things like have a decoy normal partition with system folder to boot from by default, to be bypassed with an external locked system folder disk, after which one could dismount the decoy partition and mount the encrypted partition. If locking the startup volume turns out to be too much of a pain, one could install trashguard from Highware software and set it to triple overwrite deleted files, and otherwise not lock the startup partition. How would things work on Windows 95? I imagine most of the old DOS-based encryption utilities may have compatibility problems with W95. What would a similar ideal system be for a PC? Tom

5 4

Black markets vs. cryptoanarchy
by Mike Ingle 17 Dec '03

17 Dec '03

Cryptoanarchy will have arrived when you can openly _advertise_ these services and still stay in business indefinitely. Most of the things we talk about - even Jim Bell's assassination market - already exist, but they cannot be advertised. You have to go looking for them, at some risk to both buyer and seller. If the seller is visible enough for you to find him, he is visible enough to get caught. For example, there is plenty of 'pirate' material on the net, but it tends to go away as soon as the addresses become well-known. Cryptoanarchy will be here when you can advertise yourself as a distributor of pirate software (or anything else you want to sell), do business with a publicly known contact address, and still not get caught. 'Black markets' exist due to the inability to do this. Currently the techniques of anonymity are limited to two: indirection for source anonymity and broadcast for recipient anonymity. We are more or less where crypto was before the invention of public key. You can gain security by spreading risk among multiple parties (key distributors for crypto, or remailers for anonymity) but you can't 'make your own anonymity' like you can make your own security with public key crypto. A theoretical discovery is needed particularly in the area of recipient anonymity. Good sender anonymity and weak recipient anonymity leads to 'hit and run' behavior such as spamming email and newsgroups, but not to anonymous markets. Mike > >Crypto-anarchy benefits the poor more than the rich. The underlings > >of society are going to love it. > > In fact, they basically already practice it. Not with computers, of course, > but in terms of not reporting cash income, not reporting tips, engaging in > barter work with others, and gambling in various non-sanctioned markets. > > (Numbers games and sports betting are huge markets. Interestingly, such > markets also validate much of what we say about "reputations." After all, > when was the last time you heard about a bookie being sued in court for not > paying up? And private justice is administered, as welshers are disposed of > directly, without a long, expensive trial. Nearly everything in "crypto > anarchy" has direct parallels in "underworld and black markets." Some say > they are really the same thing. Perhaps.) > > --Tim May

9 12

RSA and me...
by gt＠kdn0.attnet.or.jp 17 Dec '03

17 Dec '03

'Lo. Is the "RSA in 3 lines of Perl" a munition (under ITAR)? What if I got it as a tatoo? _______________ - 2[b]||!2[b], what's the question? It's a tautology! - PGP key now available on finer keyservers everywhere.

3 2

Hello from the Brotherhood
by Darkened-Node 17 Dec '03

17 Dec '03

Hello to everyone from the Brotherhood of Darkness Fellow Cypherpunks: Please visit our site at: http://www.ilf.net/brotherhood/ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Darkened-Node Executive Member -THE- -BROTHERHOOD- -OF DARKNESS- Comments or Questions? Darkened-Node(a)Geocities.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

Re: a retort + a comment + a question = [RANT]
by SUCRUM22_at_INDY-ADP＠smtp-gw.cv62.navy.mil 17 Dec '03

17 Dec '03

---------------------------------------------------------------------- dave kinchlea wrote: >As said in "Hair" (the movie), "Don't do it for me man, 'cause >if the shoe was on the other foot, I wouldn't do it for you!" >It's a lie anyway, you do it for yourself. That's an _easy_ judgment to make (and i definitely have to stop adding anecdotes from my life in these things!), but you missed the point - the freedoms the Cpunks diligently try to preserve (or seem to want to create...) are protected _by_ the military. who was it that said: "law, without force, is impotent" -? keep in mind that even "bad" laws have to be enforced. you can scream all you want about "good, strong" cryptostuffs, but if the phone lines are slashed, the satellite links are down, the elcerticity is off and you've got a foreign soldier waving a .45 around - just how are you going to boot up that pretty little computer and make it encode information for you, much less get it anywhere? anarchy implies ruthlessness - you going to practice cryptostuffs from a prison cell? was i assuming that you've read the book and/or seen the broadway play, "Hair"? OHHHHH - i'm sorry - you saw the _movie!_ shame on me. ---------------------- SUCRUM22(a)cv62.navy.mil ----------------------- a calculated risk based on the possible consequence of an action is better than a haphazard one based on poor judgment or ignorance --------------------------------------------------------------------- Don't confuse my views with those of the DoD or the United States Navy

3 2

Small question about the list
by MatriX Spider 17 Dec '03

17 Dec '03

Hi, I've been around the Cypherpunk list for a couple of month now and it don't correspond exactly to what I've expect. I would be realy happy if someone could tell me the adress to remove my name from the distribution list. Could anyone send me the procedure on how to remove my name of the list ? Thanks for your time and for your help, MatriX.

2 1

Re: Timmy
by .echo 17 Dec '03

17 Dec '03

>From: dlv(a)bwalk.dm.com (Dr.Dimitri Vulis KOTM) >Organization: Brighton Beach Boardwalk BBS, Forest Hills, N.Y. >Comments: Dole/Kemp '96! You can remove Dole/Kemp from your email headers, since the election is past. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= .echo echo68916(a)delphi.com

1 0

Re: Black Unicorn exposed?
by ph＠netcom.com 17 Dec '03

17 Dec '03

At 8:30 PM 11/9/1996, Robert Hettinga wrote: >At 12:45 pm -0500 11/9/96, Peter Hendrickson wrote: >> We are hardly operating in a hostile environment. Yet, somebody >> who has apparently gone to some effort to have an anonymous >> identity has been exposed. The implications of this are worth >> considering. > Nope. Sorry, Pete. Hope you didn't throw out your sholder, swinging for the > fences like that. ;-). Phew! While this news leaves me looking foolish, I am relieved. Now for my real question: Does the One True Cypherpunk really have a black unicorn on his coat of arms? Peter Hendrickson ph(a)netcom.com

1 0

Re: Legal Deffinition of Encryption?
by ph＠netcom.com 17 Dec '03

17 Dec '03

At 2:17 PM 11/9/1996, Mark M. wrote: >On Sat, 9 Nov 1996, Benjamin Grosman wrote: >> I have absolutely no idea: this is a very interesting problem. Not for just >> compression and encryption differention legally, but also, well, ANY other >> data form. If one defines a new format for saving data (i.e a new image >> format), and then exports this technology from the USA, is this exportation >> of munitions due to it's unknown qualities? Or what? >> I know that in Australia there have been problems defining electronic data, >> especially pictures (usually porn), for the purposes of prosecution. >> Because, really, a pornographic picture is no more than 1's and 0's arranged >> in a different way by a different algorithm. >> Thus I think it most likely that the law would try and approach it from the >> direction of the algorithm that saved the data and the intent with which the >> algorithm was written. >> Otherwise, I don't know. > I can't define encryption, but I know it when I see it. They way it will be forbidden is by outlawing the execution of the algorithms. The algorithms (the secure ones anyway) are well defined as is executing them. The legal system has dealt with greater ambiguities than this. An analogy to the drug laws might be useful. We don't outlaw all drugs that cause you to have weird visions and to act strangely. That would be hard to define and would cover a number of legal drugs. Instead, the specific chemicals are forbidden as they are discovered. Peter Hendrickson ph(a)netcom.com

3 3

Re: Pseudo-law on the list and libel (fwd)
by ph＠netcom.com 17 Dec '03

17 Dec '03

At 11:21 AM 11/9/1996, Jim Choate wrote: > The real issue here is that folks on the net want the protection of the 1st > Amendment but they don't want the responsibility that goes along with it. > This list qualifies as a press. As a result it has a responsibility relating > to what it distributes. I don't find the word "responsibility" in the First Amendment. You and the courts may decide John has a responsibility to let other people use his computer, but the source of this idea is not the First Amendment. Peter Hendrickson ph(a)netcom.com

1 0

Pyramid schemes and cryptoanarchy
by Clay Olbon II 17 Dec '03

17 Dec '03

It seems that pyramid scheme spamming has increased of late (if that is possible!). In my lifetime, I can only remember a single snail-mail instance of a pyramid scheme - over the net it is an entirely different story (although the number of instances is probably proportional to the number of lists I subsribe to). With fully anonymous digital cash will come the ability to develop untraceable pyramid schemes. As a staunch believer in the free market, I find laws against these schemes distasteful, quite hypocrytical (i.e. Social Security), and soon to be unenforceable. Pyramid schemes could be a growth market in a crypto-anarchic world. It is yet another market such as gambling, or the lottery, that could be conducted with anonymity. And it appears to be much more widespread on the internet currently, even without anonymity. And unlike gambling or the lottery, the payoffs could increase greatly should anonymity be available. Now, what is the point of this discussion of pyramid schemes? It is to bring to light yet another area that will be untouchable by governments. And I think that it will help continue the development and proliferation of some of our pet projects, specifically fully anonymous digital cash and remailers. Remailer operators could even fund their operations through pyramid schemes (directly, or indirectly through digital postage stamps). I am not, however, advocating spam. I simply see it as a natural extension of current practice, that may actually provide tangible benefits in the near future. Clay ******************************************************* Clay Olbon clay.olbon(a)dynetics.com engineer, programmer, statistitian, etc. Dynetics, Inc. **********************************************tanstaafl

4 3

Real Time Pads (chat modes)?
by kb4vwa＠juno.com 17 Dec '03

17 Dec '03

Anyone know if there is a software that encrypts DES, or triple DES in real time for ie, Chat modes? I think this be a very interesting idea if not already being used. I'm sure the government uses some form of real time pad. Comments? Ed

1 0

Re: Information [for new PGP user]
by Dale Thorn 17 Dec '03

17 Dec '03

Adamsc wrote: > On Thu, 07 Nov 1996 07:08:52 -0800, Dale Thorn wrote: > >> >> > I'm a new Cyberpunk! > >> Probably wearing a set of Ono-Sendai eyeballs.... > >> >> > Last, I would like to know once and for all, is PGP compromised, is > >> >> > there a back door, and have we been fooled by NSA to believe it's secure? > >> You can read and compile the source code yourself. > >Really? All 60,000 or so lines, including all 'includes' or attachments? > >I'll bet you can't find 10 out of 1,000 users who have read the total source, > >let alone comprehended and validated it. > That's not necessary - it's the fact that it's possible that matters; most > of us are content to trust the various people who actually have. However, > I'd probably be inclined to look into it seriously if I was going to use it > on anything incriminating or potentially linked to my checkbook... My main point, which is really difficult to make, since software issues are so complex today, is that I've been involved with projects on a similar scale as PGP, where several programmers contributed code to a particular executable program, and when this is the case (especially where the source is not obvious as would be data entry code and the like), it's just not practical for one person working alone, unpaid, to break the source down into manageable chunks and study it and make enough notes so that every portion of it is clearly understood and validated. People in the past have discussed 50 million line Fortran programs to set up jet training simulators and so forth, and by comparison a 60,000 line source in 'C' might look doable, as far as complete annotation is concerned. To illustrate the point, then, I recently had a chance to estimate the cost of converting a non-'C' program to 'C', which would result in a 'C' program of about 6,000 lines, or about 1/10 the size of PGP. My best guess was about 500 to 1,000 hours, and to analogize that to PGP, where I wouldn't be writing or converting code ostensibly, just annotating it, I would still guess 2,500 to 5,000 hours, if the job were done correctly and thoroughly. If the job is not practical/feasible, then IMO I can say it's not doable. OTOH, if some one or a handful of people wanted to make the source code of PGP really accessible to the masses (of programmers at least), they should start with a plan to make sure it's broken down into a heirarchy of functions so that: 1. No one function is too large (say, no more than 50 lines or so). 2. All functions use reasonably short variable names (ex: 'iTrapon'). 3. Variable names are consistent in capitalization. 4. Function names follow the heirarchy and are logically intuitive. 5. Constant and #define names follow a heirarchy as well. 6. Where a choice is possible between setting out a construct that (visually speaking) looks very complex and is difficult to follow, and making it simpler, take the simpler path.

1 0

Proxies
by Vipul Ved Prakash 17 Dec '03

17 Dec '03

Is there a list of http proxy servers one could go through? I think its a nice [rather sutle] way of achieving web.anonymity without using more apparent anonymizers.... Vipul -- Vipul Ved Prakash | - Electronic Security & Crypto vipul(a)pobox.com | - Internet & Intranets 91 11 2233328 | - Web Development & PERL 198 Madhuban IP Extension | - Linux & Open Systems Delhi, INDIA 110 092 | - (Networked) Multimedia

1 0

Re: ideal secure personal computer system
by Joel McNamara 17 Dec '03

17 Dec '03

See the CryptoBook link at http://www.eskimo.com/~joelm While the concepts were originally developed for a laptop, they're easily applied to a desktop machine running Win95. Joel >Here's a question: if one were designing for oneself a secure personal >computer system, for use in, say, word processing, spreadsheet, >communications, the usuals - what system would one purchase and how would >one set it up? > >For example, on the Mac I would envision this as the ideal system: > >(1) Get a power mac >(2) Partition the hard drive into two partitions: > install the system folder on one and a copy of CryptDisk > make this the startup partition and make it READ ONLY with aliases to > folders you want to be modiyfable (such as Eudora Folder in the sys folder) > place these folders on the encrypted partition >(3) Completely fill the other partition with a CryptDisk file so there is no > room for other stuff to be written. Adjust the partition size if needed. >(4) Install a screen saver (such as shareware Eclipse) that will password lock > the screen after a few minutes of inactivity, and set CryptDisk to dismount > the external partition after a few minutes of inactivity (or longer) > >This would be a basic setup. If one had more complex ideas, such as setting >it up so casual onlookers would not notice the system was protected, you >could do things like have a decoy normal partition with system folder to >boot from by default, to be bypassed with an external locked system folder >disk, after which one could dismount the decoy partition and mount the >encrypted partition. > >If locking the startup volume turns out to be too much of a pain, one could >install trashguard from Highware software and set it to triple overwrite >deleted files, and otherwise not lock the startup partition. > >How would things work on Windows 95? I imagine most of the old DOS-based >encryption utilities may have compatibility problems with W95. What would a >similar ideal system be for a PC? > >Tom > > > >

2 1

Re: a retort + a comment + a question = [RANT]
by John Young 17 Dec '03

17 Dec '03

Sandy Sandfort wrote: A brilliant mini essay, which most succinctly answers Samuel P. Huntington's long essay in November Foreign Affairs. And recaps the ancient struggle between "public-governmental" in the "public interest" and "private-anti-governmental" in the "private interest." Those who argue that the public needs protection from internal and external enemies -- "national security" -- gloss over that this ideology has a long heritage as a big-time, self-interested business, or racketeer influenced organized crime, to be blunt. Colin Powellism breast-fed on Fight the Day's Devil milk, like two thousand generations of fundamentalist up-and-comers. For governmental and military and priestly careerism is no different that the profit or organizational kinds. Each have religio-philosophical underpinnings backed by shrewd legislative pie-slicing-and-distribution with crucial physical enforcement to fend off those who didn't get a slice and are hungrily pissed at the collusive exclusion. A lot of this smoke is PR machines blowing hard for each of the Big Bands: Gov, Mil, Com, Org, Edu, Etc. Blurring the distinctions, stealing from one another, swapping personnel and programs, doling out contracts, racing to copy the latest ploy, apology, attack, whine, while securing those ancient by-the-rule perks against the ruthless up-and-comers. Mafia, military, crypto shooters -- taking orders for small kisses of blessing/death, climbing the ladder of earthly reward. Still, global anarcho-bands of mercenary bandits, hmm, what's that 411 for International Terrorist Gun Show -- er, military-industrial showcases of megadeath?

1 0

Cypherpunks, Inc?
by azur＠netcom.com 17 Dec '03

17 Dec '03

Now why don't the cypherpunks put together something like the item below? In fact, why don't we form some sort of Guild, trademark the term cypherpunks (I'll volunteer) and offer cracking and security products (like the one below) or services? A product security endorsement from Cypherpunks Inc. could carry a lot of weight :-) >From: security.admin77(a)safest.you >To: >Date: Sun, 10 Nov 1996 10:43:01 PST >Subject: Your Email Privacy Has Been Compromised > > > > >This Message Contains Important Information About Violations >of Your On-Line Privacy. > > > >*Email and Online Security Violations.* >Please be advised that information contained in email is similar >to a post card. It can easily be read in transit and does not go >directly from your computer, to the computer of the recipient. >Your message often passes through the hands of countless >computer systems on its path to where you sent it. Because of >this, it can easily be seen by many prying eyes on the way to its >destination. If you are mailing personal, business or financial >data it is unwise to use traditional email. There are many people >on the net who profit by snooping in the open "post card" style >email that most account holders utilize. Programs are readily >available to make this task simple. Additionally, many people >are purchasing mailing lists which contain your email address. >If you do not wish to receive unsolicited email, there are a >number of free and highly effective steps you can take to >recapture your privacy. > >The personal exposure spoken of is not limited to email. If you >make use of other internet services such as the World Wide >Web, your privacy is at even greater risk. Unless secure, any >information you enter on a form can be read in transit, just like >email. Additionally, most of the information providers you contact >on the web routinely collect information about you in high detail. >This information goes right down to where you are located, and >what kind of computer and operating system you use! > >To combat this problem, many countermeasures have been >developed of which most account holders remain unaware. The >on line criminals would like to keep it that way. Every net citizen >needs to learn to stop sending "Post Cards" and stop allowing >distant machines to accumulate large amounts of information >about who they are and their interests. > >There are many simple things you should be doing right now to >protect your privacy. Most of the best countermeasures available >are FREE. This is because there is still a very strong vein of >computer experts on the net who believe in an individual's right to >privacy. There are excellent, completely free programs that you >should be using right now to browse the web in an untraceable >and private manner, and send email that only the recipient can >read! > >You don't need to be a computer expert to use these tools. They >often take little or no additional time and are designed to be very >simple for the computer illiterate to use. The computer gurus >that designed these programs know that it is extremely important >that average net citizens make use of them. They have designed >and continually revised them with that in mind. > >My name is Jeff Martin, my associates and I have spent a great >deal of time researching this subject. It is my goal to provide you >with access to the best resources available to keep your >communications private. My information relates to both email >and other aspects of the internet such as the World Wide Web. >This information was put together because I don't feel that others >are making it available in this form of wide distribution, and it >needs to be done. The internet is just like a city in that you need >some street smarts to keep yourself as safe as possible. That's >the kind of information I wish would have been provided to me >when I began to go on line, and it is what I have tried hard to put >together to help you out. > >In my program you'll learn: > >*How to send email that cannot be traced. > >*How to send email to your friends and associates that cannot >be read in transit. > >*How to post anonymously to Newsgroups. > >*How to browse the web and download files anonymously. > >*Why you should (almost) never send financial information over >the net. > >*How to prevent your name from being gathered and sold for >bulk email use. > >*And Much, Much, Much, More .... > >My package is a treasure trove of valuable information collected >to guarantee your privacy! > >This is the first time I am making this information available. In a >short while, the program will be retailing for $59.95. However, if >you respond within the next 7 days of receiving this message you >will receive the special price of $19.95. Because of the amazing >expansion of the internet, I have decided to make this offer so >that everyone can afford to learn how to protect themselves from >the net's growing criminal element. After seven days you may >still order the program at its retail price of $59.95. > >Additionally, if you order within the next 48 hours, I'll include a >very special report about how you can get a free email address >and account to use from just about anywhere in the U.S. I'll >show you how, but you must order within the next 48 hours! > >HOW TO ORDER >I strive very hard to protect your security. I do not accept >unsecure credit card or check information by email, because it is >too easily intercepted. While this could increase my orders, I feel >that your security as a customer is more important. I am a small >business person and keeping up with phoned and faxed in orders >has proven to be too difficult for me. Therefore I now only accept >orders via postal (snail) mail. Please be certain to give me your >email address when ordering. I prefer to ship orders via email >so that you can have my information as soon as possible. > >To order send a check, money order, or credit card information >(Visa, MasterCard, Discover) to me at: > >Jeff Martin >POB 72106 >Newport, Kentucky 41072 > >Any credit card orders must use the attached form below. >Thank you very much for your time. > >Best Wishes, > >Jeff Martin > > >This information will always be held in the strictest confidence. > > Credit Card: Visa Mastercard Discover > > Card #:______________________________________ > > Expiration Date:__________________ > > Name on Card:________________________________ > > Please indicate amount $__________ ($19.95) or (59.95) > > > SIGNATURE:x________________________ > >DATE:x__________________ > > >Copyright 1996, Jeff Martin. All rights reserved.

1 0

Rarity: Crypto question enclosed
by David K. Merriman 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit To: cypherpunks(a)toad.com Date: Sun Nov 10 15:03:35 1996 Sorry that this message doesn't include any flames, "outings", denigrations, or other stuff...... My simple question is regarding key/certificate distribution: Is there any particular reason that such can't be accomplished via on-line lists, and made available via a service on a port, using standard (textual) commands, like mail and such are now? The things that come to mind are a 'client' request for a key, a 'client' submission of a key, an external host requesting a key exchange, and the host itself requesting a key exchange with another system (only new/changed keys being swapped). The way I see it working is similar to (but not as slow as, or requiring the human intervention) of the key servers already existing. Granted that the first few such servers might carry a higher load, but I'd think that would taper off as the (presumably free) software became available, similar to the growth of remailer software (which would seem to be a fairly reasonable relationship....). Hooks into existing PGP-fluent software shouldn't be difficult with a standardized protocol, and I wouldn't think that the servers would be that difficult to code and implement on a 'standard' (consistently used, that is) port. I'm willing to have a try at the first server, if the parameters can be defined. Dave Merriman -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMoV+S8VrTvyYOzAZAQHlMQP/eU3F2JyaQcU6tQ+J5iCdAdPKiBNORJGT chgNauyaH/dHwj+DzcKZzhmjabsICGZjPbJvH+DIvnbGx3eGF1Y2HUAHvt5ab4ww gfPJ7xfjwNUJPyrTQtp7lXVdB5BVfSw/I2lHzSg1ssRvTo4iF+gIoAQypOT1Z617 Fo/c1h77KgA= =pkk/ -----END PGP SIGNATURE-----

3 2

Re: Another possible remailer attack?
by Steve Reid 17 Dec '03

17 Dec '03

>> You want to know if Dimitri is the person regularly posting these >> messages. So, you use your powers as ISP to block his access to all >> remailers. If the public messages suddenly stop then you can be >> reasonably certain that Dimitri was sending them. > I'm not following something...just how to your "powers as ISP" affect a > remailer in, say, Holland, or one for that matter on another ISP? (As a Packet filtering at the ISP's router. If Dimitri can't connect to a remailer, he can't send anonymous messages. Sure there are a lot of hacks that could be done (like have sendmail on another system send it to a remailer) but such things could be detected and blocked by clever filters. In fact, the ISP could just claim to be "going down for maintenance" and completely block Dimitri from the internet for a while. > Just as the Nazis could isolate spy transmitters by selectively > turning off electricity to different neigborhoods, so, too, can various Isolating spy transmitters by selectively cutting power is exactly alalogous to what I have suggested.

1 0

[IGNORE unless your name is Sandfort]
by Black Unicorn 17 Dec '03

17 Dec '03

Mail to you currently bounces. Is an alternative address available? -- Forward complaints to : European Association of Envelope Manufactures Finger for Public Key Gutenbergstrasse 21;Postfach;CH-3001;Bern Vote Monarchist Switzerland

1 0

RE: Pyramid Schemes
by John Fricker 17 Dec '03

17 Dec '03

Pyramid schemes invalidate the worth of one's word. By gaining financially from one's recommendation said recommendation becomes of dubious trustworthiness. Traditionally, personal experience and anecdotes about products, goods and services have served as reputable guides in consumer culture. By gaining financially from one's word, one is cashing in their reputation. --j ----------------------------------- | John Fricker (jfricker(a)vertexgroup.com) | -random notes- | My PGP public key is available by sending mail with subject "send pgp key". | www.Program.com is a good programmer web site. -----------------------------------

1 0

Scientists for Labour conf on encryption/escrow/data protection Nov 14th
by Caspar Bowden 17 Dec '03

17 Dec '03

Full details: http://www.shef.ac.uk/~sfl/meetings/itconf.html PLEASE DISTRIBUTE AND LINK TO YOUR WEB-SITE: Scientists for Labour - IT & Communications Group Conference on Information Superhighway Policy --------------------------------------------------------------------- "Liberty on the Line : Opportunities and Dangers of the Superhighway" --------------------------------------------------------------------- Chaired by Geoff Hoon MP, Shadow Minister for IT Thursday 14th November 1996, 9am - 5:30pm MSF Centre, 33-37 Moreland Street, London EC1 (Angel tube) --------------------------------------------------------------------- For further details or to reserve a place contact: Caspar Bowden, SfL IT & Comms co-ordinator (qualia(a)dircon.co.uk) The debate over Internet regulation in the UK has focused mainly on censorship, but the standards for control of "encryption keys", currently being formulated nationally and internationally, will lay the permanent foundations on which the Information Society is built. The long-term implications for civil liberties have received little public attention outside the Internet community. Scientists for Labour is hosting a conference to look at the data protection and economic issues arising from the integration of digital signatures, electronic copyright management, and digital cash. What kind of regulatory apparatus will allow rapid growth of an information economy, but prevent misuse of personal data ? *) New government proposals on "Trusted Third Parties", which aim to preserve law enforcement and national security capabilities for warranted interception of communications (to fight crime and terrorism), place only procedural not technical limits on the scope of Superhighway surveillance. *) Super-computers have the potential to conduct random electronic "fishing expeditions" against the whole population. Telephone and letter interception cannot be automated : digital monitoring can. Will legal safeguards against abuse offer adequate protection in perpetuity, or can cryptographic protocols be designed which make Superhighway mass- surveillance impossible, while still allowing criminals to be targeted ? Computer and legal policy experts will explain the principles of the different technologies, and the international and commercial context, in a search for interdisciplinary solutions. The attendance fee is ?5 (?2 unwaged ; SfL members free) For press information please contact : Bobbie Nicholls, SfL Press Officer, Fax: 01235 529172 The Scientists for Labour home page (http://www.shef.ac.uk/~sfl/) has information on how to join SfL, or contact the Secretary : Dr Robin Walters (R.G.Walters(a)shef.ac.uk) Programme --------- 9.00-9.30 Registration SfL members free, non-members ?5 (?2 unwaged) 9.30-9.45 Geoff Hoon MP Introduction 9.45-10.45 Dr.John Leach Cryptography and developments in Trusted Third Party policy 10.45-11.45 Dr.Ross Anderson Some problems with the Trusted Third Party programme 11.45-12.00 Coffee 12.00-12.30 Elizabeth France (Data Protection Registrar) 12.30-1.00 Simon Davies Escrow and the hidden threat to human rights and privacy 1.00-2.00 Buffet lunch 2.00-2.45 Prof. Charles Public policy and legal aspects of Intellectual Oppenheim Property Rights 2:45-3.30 Alistair Kelman Electronic Copyright Management : Possibilities and Problems 3.30-3.45 Tea 3:45-4:45 Andrew Graham Will the Information Superhighway enhance or diminish democracy ? 4.45-5.30 Panel Session Discussion (inc. Robert Schifreen) ---------------------------------------------------------------------

1 0

Re[2]: a retort + a comment + a question = [RANT]
by SUCRUM22_at_INDY-ADP＠smtp-gw.cv62.navy.mil 17 Dec '03

17 Dec '03

---------------------------------------------------------------------- Paul Foley <mycroft(a)actrix.gen.nz> wrote at the end of an enlightening message: >(BTW, does your address @smtp-gw.cv62.navy.mil imply >that that you're actually aboard the Independence?) yes it does. questions/comments can be directed via e-mail to my address as i am already _almost_ off-topic. remember people, i'm playing devil's advocate here. so far, while nothing has really changed my thinking process outright, comments are surely making me think more (assuming that that's the point). ---------------------- SUCRUM22(a)cv62.navy.mil ----------------------- a calculated risk based on the possible consequence of an action is better than a haphazard one based on poor judgment or ignorance --------------------------------------------------------------------- Don't confuse my views with those of the DoD or the United States Navy

1 0

Re: New Linux-IPSEC mailing list for the S/WAN project
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

"Michael H. Warfield" <mhw(a)wittsend.com> writes: > > Dr.Dimitri Vulis KOTM enscribed thusly: > > > > Hayashi_Tsuyoshi <take(a)barrier-free.co.jp> writes: > > > > > On Sat, 09 Nov 1996 10:47:28 -0800, stewarts(a)ix.netcom.com said: > > > >At 01:29 AM 11/9/96 -0800, John Gilmore <gnu(a)toad.com> wrote: > > > >>ask questions, etc. To join the list, send mail to: > > > >> linux-ipsec-REQUEST(a)clinet.fi > > > >>The email should contain a single line that just says: > > > >> subscribe > > > > > > > >Actually, it needs to say > > > > subscribe linux-ipsec > > > > > > Probably, it needs to send mail to: > > > Majordomo(a)clinet.fi > > > > > > ///hayashi > > > > Moral: John Gilmore can't be trusted. > > Moral: No wonder you get your ass thrown off mailing lists. You're a fucking > jerk who seems incapable of making and intelligent or constructive > contribution to a discussion. > > We're working on something serious here and trying to cooperate and > help each other. All you can find to do is jump in and make an ass of > yourself. Since you're such a stupid ignoramous, I'll point out that the > instructions which John posted agree with the messages coming from Tatu's > system. They just didn't work. So, Tatu has something misconfigured on > his system. But I suppose you couldn't be BOTHERED to even fucking check. > > You own John an apology but I think that's a bit much to expect > from low life like yourself. Yeah, right. Be sure to ask Paul Bradley to implement his brute force attack on one-time pads. :-) --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0

WIPO Treaty: Worse than CDA- Deadline 22 Nov 96 ; availability and use of knowledge emasculated ; impact on web catastrophic.
by attila＠primenet.com 17 Dec '03

17 Dec '03

WIPO Treaty: Worse than CDA Deadline 22 Nov 96 for comment to Congress WIPO was introduced this spring to Congress. It is not understood by either the Clinton administration or the Congress and few of the public are aware of the problem! CP internal bad mouthing and intellectual assignations need to to come to a dead halt --if we want the net at all, or for the net to be an information provider, the impact of the CDA would be chump change for peanuts in comparison. The WIPO clauses involving rights to collections of what are commonly public domain "fact" will become private property --literally; even more so than the restrictions of the 'fair use' conventions. The availability of knowledge emasculated; the impact on web is catastrophic; web information and fair use policies are gutted. My message to Bubba, West Publishing, and the rest of the greedy bastards: Cyberspace and Freedom are Information. FUCK your WIPO, too. -attila ------------------------------------------------------------------------------------------------------- The following message is an excerpt of a message from James Love <love(a)tap.org> forwarded by attila <attila(a)primenet.com> see Consumer Project on Technology: http://www.essential.org/cpt ------------------------------------------------------------------------- . Sports fans in the United States will be surprised to learn .that U.S. Government officials are pressing for the adoption of .an International treaty that will (if enacted) significantly .change the ways sports statistics are controlled and .disseminated. The treaty isn't specifically directed at sports .statistics -- it is a much broader attempt to create a new property right in facts and other data now in the public domain -- but it will have an enormous impact on the legal rights [...] on sports, stock prices, weather data, train schedules, data from AIDS research and other facts are controlled.... See, for example: http://www.news.com/News/Item/0,4,3208,00.html The treaty addresses much more fundamental issues regarding ownership of information currently in the public domain... I am deleting the bulk of the report for brevity, including only the definition of the "database" as it applies to WIPO. .WHAT IS A DATABASE? WHAT ISN'T A DATABASE? . .The treaty would protect "any database that represents a .substantial investment in the collection, assembly, verification, .organization or presentation of the contents of the database." . .This term should be understood "to include collections of .literary, musical or audiovisual works or any other kind of .works, or collections of other materials such as texts, sounds, .images, numbers, facts, or data representing any other matter or .substance" and "may contain collections of expressions of .folklore." The "protection shall be granted to databases .irrespective of the form or medium in which they are embodied. . .Protection extends to databases in both electronic and non- .electronic form" and "embraces all forms or media now known or .later developed. . . Protection shall be granted to databases .regardless of whether they are made available to the public. This .means that databases that are made generally available to the .public, commercially or otherwise, as well as databases that .remain within the exclusive possession and control of their .developers enjoy protection on the same footing." . .WHAT ARE EXTRACTION AND UTILIZATION RIGHTS? . ."The maker of a database eligible for protection under this .Treaty shall have the right to authorize or prohibit the .extraction or utilization of its contents." What is "extraction"? .Extraction is defined as, "the permanent or temporary transfer of .all or a substantial part of the contents of a database to .another medium by any means or in any form." "Extraction . . . is .a synonym for `copying' or `reproduction' . . . by `any means' or .`any form' that is now known or later developed." . ."Utilization" is defined as "making available to the public all .or a substantial part of the contents of a database by any means, .including by the distribution of copies, by renting, or by on- .line or other forms of transmission," including the right to .control the use of the data "at a time individually chosen by .each member of the public." . .WHAT IS A "SUBSTANTIAL PART" OF THE DATABASE? . .The treaty sets out tests for determining if an extraction is ."substantial," and these tests are both highly anticompetitive, .and extremely broad in scope. . .The "substantiality" of a portion of the database is assessed .against the "value of the database," and considers "qualitative .and quantitative aspects," noting that "neither aspect is more .important than the other . . . This assessment may also take into .account the diminution in market value that may result from the .use of the portion, including the added risk that the investment .in the database will not be recoverable. It may even include an .assessment of whether a new product using the portion could serve .as a commercial substitute for the original, diminishing the .market for the original." . .Then the treaty adds that a "substantial part" means any portion .of the database, "including an accumulation of small portions . . .. In practice, repeated or systematic use of small portions of .the contents of a database may have the same effect as extraction .or utilization of a large, or substantial, part of the contents .of the database." .In the US implementing legislation, the only types of data use .that would not be regulated would be "insubstantial" parts, ."whose extraction, use or reuse does not diminish the value of .the database, conflict with a normal exploitation of the database .or adversely affect the actual or potential market for the .database." Under this language, a database owner could say that .it might in the future want to charge for each transmission of a .fact or an element of a database as part of its "normal .exploitation" of the database. With the Internet and digital cash .this claim is likely to be made. The public would not have "fair .use" rights, since fair use is only defined in matters involving .copyright. . .FOR HOW LONG? 15 YEARS, 25 YEARS, OR FOREVER? . .The Treaty would require a minimum term of protection (15 years .in the EU proposal, and 25 in the United States proposal) for the .database. But this is extended each time the database is revised .or enhanced. According to the draft treaty, "any substantial .change to the database, evaluated qualitatively or .quantitatively, including any substantial change resulting from .the accumulation of successive additions, deletions, .verifications, modifications in organization or presentation, or .other alterations, which constitute a new substantial investment, .shall qualify the database resulting from such investment for its .own term of protection." . .The provision on revisions raises the specter that protection for .many databases will be perpetual. This could indeed be the case .if the original versions of the database are only "licensed" by .the vendor for a limited period of time, so that the only .available versions would be the new ones, which would have a new .term of protection. [Database vendors write these restricted use .licenses now]. . . The proposals for a new legal environment for publishing .facts are outlined in a draft treaty on "databases" that will be .considered at a December 1996 meeting of the World Intellectual .Property Organization (WIPO), in Geneva, Switzerland. See: . . www.public-domain.org/database/database.html . . The proposal would require the United States and other countries to .create a new property right for public domain materials. "Texts, sounds, .images, numbers, facts, or data representing any other matter or .substance," will be protected. . . The treaty seeks, for the first time, to permit firms to ."own" facts they gather, and to restrict and control the .redissemination of those facts. The new property right would lie .outside (and on top) of the copyright laws, and create an .entirely new and untested form of regulation that would radically .change the public's current rights to use and disseminate facts .and statistics. American University Law Professor Peter Jaszi .recently said the treaty represents "the end of the public .domain." . .Copies of the proposed treaty, a federal register notice .asking for public comment, and independent commentary can be .found at: . . http://www.public-domain.org/database/database.html . .WHO IS PUSHING FOR THE DATABASE TREATY? . . In 1991, the US Supreme Court ruled (in the Feist decision) .that the facts from a telephone "White Pages" directory of names, .addresses and phone numbers were not protected under the .copyright laws, and that in general, "facts" could not be .copyrighted by anyone. The Feist decision alarmed several large .database vendors, who crafted this new "sui generis" property .right that would protect facts, and just about everything else. .[The vendors have already succeeded in obtaining a directive on .the database proposal from the European Union, although no European .country has yet passed legislation to implement the treaty]. The .most active supporter of this new property right is West .Publishing, the Canadian legal publisher. A West Publishing .employee chairs a key ABA subcommittee which wrote a favorable .report on the treaty. A number of very large British and Dutch .database vendors are also lobbying hard for the treaty. .West wants the new property right to protect the "page .numbers" and "corrections" it adds to the judicial opinions it .publishes in paper bound books. Telephone companies want to .protect the names, addresses and telephone numbers they publish, .and other database vendors what to protect scientific data or .other non-copyrighted government information they publish. In .seeking to protect these items, the treaty was written to stamp ."owned by" labels on a vast sea of information now in the public .domain. Copyright experts J.H. Reichman and Pamela Samuelson .say it is the "least balanced and most potentially anti- .competitive intellectual property rights ever created." see: . . http://ksgwww.harvard.edu/iip/reisamda.html . . In Feist, the Supreme Court noted: . (a) Article I, Sec. 8, cl. 8, of the Constitution mandates . originality as a prerequisite or copyright protection. The . constitutional requirement necessitates independent creation . plus a modicum of creativity. Since facts do not owe their . origin to an act of authorship, they are not original and, . thus, are not copyrightable. . [From the Syllabus of the opinion, at: . . http://www.law.cornell.edu/supct/classics/499_340v.htm . .Since facts cannot be copyrighted, the supporters of the .treaty have framed this as a new "sui generis" property right, .which will have a separate statutory framework. "Originality" or ."authorship" will not be required. . .As a "sui generis" property right, the database proposal .does not incorporate the fair use principles from copyright that .reporters and value added publishers often take for granted. The .leagues would be able to require license to publish box scores or .other statistics in any media. One can imagine a world where the .leagues wouldn't require licensing of box scores to print based .periodicals like daily newspapers, but that a much more .controlled regimen would evolve on the Internet. The leagues .could require licensing of box scores and other statistics for .Internet publications, or linking to the leagues own web sites, .such as: . . www.nba.com . www.nba.com . www.nhl.com . .WHAT CAN YOU DO? . . The government is taking comments on the database treaty .through November 22, 1996. If you don't think the government .should rush into a new regulatory scheme for sports statistics, .let them know. . You can email your comments to: . . diploconf(a)uspto.gov . .If you want to know more about his proposal, check out: . . http://www.public-domain.org/database/database.html . .Two law professors who have studied the treaty extensively are: . .Professor Pamela Samuelson, University of California at Berkeley, .Voice (510)642-6775, pam(a)sims.berkeley.edu . .Professor Peter Jaszi, American University, School of Law, Voice .(202) 885-2600, pjaszi(a)wcl.american.edu . . APPENDIX . .Extracts from James Love, "A Primer On The Proposed WIPO Treaty .On Database Extraction Rights That Will Be Considered In December .1996, October 29, 1996, . . http://www.essential.org/cpt/ip/cpt-dbcom.html -- Cyberspace and Freedom are Information. FUCK your WIPO, too. -attila

1 0

Re: Rarity: Crypto question enclosed
by Michael Peponis 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- > Sorry that this message doesn't include any flames, "outings", > denigrations, or other stuff...... Hey, that "stuff" comes in useful. Some of the more origional ones are posted on my office wall, so when people accuse me of being a childish, insensitive and egotistical I just show them some cypherpunk postings, "See, I'm not this bad, count yourself fortunate how would you like to work for some of these guys?" > My simple question is regarding key/certificate distribution: > > Is there any particular reason that such can't be accomplished via > on-line lists, and made available via a service on a port, using standard > (textual) commands, like mail and such are now? Conceptual, I had the same idea about a year ago, but never enough time to do it. Practically, it could be painful. It's possible to have a key-server listen on a port and accept requests, then it would fork a process, process the result, and return an answer set. But how many CPU cycles would it take for a machine to process a request, ie going through 1000 of keys? I am not exactly sure, it took a long while on my pentium. In my opinion, if I were to run a key server as a service, with clients connecting and requesting a key it shouldn't take more than a minute to get a responce. > The things that come to mind are a 'client' request for a key, a > 'client' submission of a key, an external host requesting a key exchange, > and the host itself requesting a key exchange with another system (only > new/changed keys being swapped). Had the exact same idea, but came up with an interesting concept. When a person submits a key, a PGP process is spawned yeilding the following information 1.) The name (peponmc(a)cris.com) 2.) The real name (Michael Peponis) 3.) The key size 4.) Creation date of the key 5.) Key finger print This information, along with the acutal key would be inserted into a SQL Database table With a structure similar to this Name varchar2 Real_name Varchar2 KeySize Integer CreationDate date PGPKEY Varchar(a fairly large one) Submission_date Date The idea here being that the key would be added as a field, and requests from clients and other key servers would do a simple Database query, which are very quick. > The way I see it working is similar to (but not as slow as, or > requiring the human intervention) of the key servers already existing. > Granted that the first few such servers might carry a higher load, but I'd > think that would taper off as the (presumably free) software became > available, similar to the growth of remailer software (which would seem to > be a fairly reasonable relationship....). > Hooks into existing PGP-fluent software shouldn't be difficult with > a standardized protocol, and I wouldn't think that the servers would be > that difficult to code and implement on a 'standard' (consistently used, > that is) port. It's not that hard, it's performance that's more of an issue. The beauty of my approch would be that initially, there would be alot of "Add" requests, resulting in many PGP processes running on the box, but eventually, they would tapper off. Database requests pose no real problems, on Unix boxes, especially with Oracle, the SGA is always running, it's just one more request, going up against a realatively small table. The box could return an answer in a matter of seconds, as opposed to over a two minutes. Server updates would be swift too, they would just transfer well defined SQL Datasets between themselves. > I'm willing to have a try at the first server, if the parameters > can be defined. Let me know what you think of my idea > Dave Merriman -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: cp850 iQCVAwUBMoZirkUffSIjnthhAQFBpAQAw1a48NY/IPai8FqAkqlfi2tLoreGlQlW RaWLVnSE/dl4CpRf+nLXjRRYQL6FlmKxfVkgv68yS3srFlx9KpkGqOT3k9hZGfzU 3X+ADKI2oKzSZM92vmYoM+BGtxggdgg/SjoPwyxq76FuiHt6SnDcCvXeRUDclFHi CMqPPKvaqBo= =Yudv -----END PGP SIGNATURE-----

1 0

RE: "Nightmare on Crypto Street, Part 1"
by jbugden＠smtplink.alis.ca 17 Dec '03

17 Dec '03

"Timothy C. May" <tcmay(a)got.net> wrote: >I also summarize Peter's set up much as you did: > >"Suppose [A]. Suppose [B] ... [Then Z is likely]. In the middle of the Polish crisis, in the early 1980s, while there were riots over the high cost of living and the lack of food, Tversky and Kahneman [seminal cognitive science researchers] asked a number of political leaders and generals to evaluate the probability [Scenario 1] that the United States might withdraw its ambassador from the then Soviet Union (without any hypothesis as to why). They further asked the same subjects to evaluate the probability [Scenario 2] that _both_ of two other things would take place: (a) that the U.S.S.R. would invade Poland and (b) that, as a consequence of the former, the United States would withdraw its ambassador from the Soviet Union. Guess which was scenario was assumed to have a higher probability. These questionaire-experiments, just like real life, have countless times shown us that a plausible and well-told story can lead us to hold as "objectively" probable events that, just minutes before, we would have considered totally improbable. Probabilities being, by their nature, less than one, the probability of the entire chain (or the last link) being true is always and without exception lass probable than the probability of the least probable link in the chain. We fail to notice this prograssive attenuation of probability. The story takes over from reality. The trick - which is the oldest in the book - is to find the narrative path by which the last, and most implausible, link can be made imaginatively compelling. Give us a little story, a script, something born of our own imagination, and our own natural tendencies, cognitive or emotional, do the rest. This discussion applies as well to the other script: Irreversible Crypto-Anarchy, soon appearing on a street near you. Ciao, James Quoted liberally from the book _Inevitable Illusions_ by Massimo Piatelli-Palmarini, Ph.D. The author is a pricipal Research Associate of the Center for Cognitive Science at MIT. I recommend the book.

1 0

Re: A Disservice to Mr. Bell
by jim bell 17 Dec '03

17 Dec '03

At 07:16 AM 11/10/96 -0800, Dale Thorn wrote: >jim bell wrote: > >> Interestingly enough, the one thing the Commonlaw court system needs is an >> effective enforcement system. One likely method is the commercial lien >> process, but even that tends to be resisted by people who are far more used >> to dealing with equity court personnel. It turns out that my AP system >> seems to mesh almost perfectly with their needs, although obviously in >> practice it would only be used as a "last resort." > >Speaking of Common Law courts and their Liens, the feds have expanded their crackdown >begun with the Freemen of Montana. They arrested Elizabeth Broderick and several of >her associates or whatever, and I know at least one person personally who is hiding >or keeping a very low profile at least. [these are people in the common law/lien >business] This is, generically, a dispute that the Federal government will eventually lose, I think within 10 years or so. Commonlaw courts were quite real (in fact they pre-dated equity courts by at least 2-3 centuries), and they can rapidly reconstitute themselves along their original lines. There are, I think, two reasons that the equity court system (and their sleazy lawyers, both on and off the bench) are worried. First, what they have now is, effectively, a monopoly on "justice." The re-emergence of commonlaw courts would provide competition that has been long gone. Think of it like any monopoly that suddenly has to accept competition. The second reason is that with the return of commonlaw courts will be eliminated the tradition (and that's all it was, effectively a tradition) of judicial immunity. Imagine how easy it could be to bring criminal charges against judges, lawyers, cops, and others who are either "impossible" to sue or at least very difficult. Jim Bell jimbell(a)pacifier.com

1 0

Re: ideal secure personal computer system
by ph＠netcom.com 17 Dec '03

17 Dec '03

At 3:55 AM 11/10/1996, tom bryce wrote: >Here's a question: if one were designing for oneself a secure personal >computer system, for use in, say, word processing, spreadsheet, >communications, the usuals - what system would one purchase and how would >one set it up? > >For example, on the Mac I would envision this as the ideal system: > >(1) Get a power mac >(2) Partition the hard drive into two partitions: > install the system folder on one and a copy of CryptDisk > make this the startup partition and make it READ ONLY with aliases to > folders you want to be modiyfable (such as Eudora Folder in the sys folder) > place these folders on the encrypted partition >(3) Completely fill the other partition with a CryptDisk file so there is no > room for other stuff to be written. Adjust the partition size if needed. >(4) Install a screen saver (such as shareware Eclipse) that will password lock > the screen after a few minutes of inactivity, and set CryptDisk to dismount > the external partition after a few minutes of inactivity (or longer) Watch out for the clipboard which appears to be stored as a file in the system folder. Unfortunately, it has to be a real file - aliases not allowed. This makes it harder to have a read only system folder and, of course, every time you cut and paste something you leave a ghost on the disk for an undefined length of time. It's hard to work on the Mac without using the clipboard. I would love to know a workaround for this. Peter Hendrickson ph(a)netcom.com

1 0

No Subject
by Igor Chudov ＠ home 17 Dec '03

17 Dec '03

manifold::~==>premail -t cypherpunks(a)toad.com Chain: haystack;jam Subject: I urgently need a lot of money. Please share your money-making secrets, I am in a desperate need for cash.

5 8

infowar Digest for 10 Nov 1996
by list 17 Dec '03

17 Dec '03

infowar Digest for 10 Nov 1996 Topics covered in this issue include: 1: RE: Chemical Warfare Agents by alm(a)io-online.com 2: Propaganda and TWA/CIA-Cocaine by winn(a)infowar.com -------------------------------------------------------------------------- 1 Message:0001 1 -------------------------------------------------------------------------- To: infowar(a)infowar.com From: "Betty G. O'Hearn" <betty(a)infowar.com> Subject: Infowar Digest Vol. 1 # 1 infowar(a)infowar.com Sunday, November 10 1996 Volume 01: Number 01 We thank our sponsors: National Computer Security Association OPEN SOURCE SOLUTIONS Inc. New Dimensions International - Security Training Secure Computing Corporation HOMECOM Communications Internet Security Solutions ___________________________________________________________ Infowar(a)infowar.com is brought to you in the the interest of an open, unclassified exchange of information and ideas as a means for advancement of Information Warfare related issues. Topics of discussion for this list include: Infowar, Electronic Civil Defense, Hacking, Defensive Techniques, Policy, Non-Lethals, Psyops, Chemical Warfare Agents and WMD. As the list expands we will adapt to the needs and desires of our subscribers. This is a DIGEST format. ________________________________________________________________ Contents of this Digest: Volume 01: Number 01 Infowar(a)infowar.com Chemical Warfare Agents Infowar(a)infowar.com Iraq WMD Infowar(a)infowar.com RE: Chemical Warfare Agents ---------------------------------------------- To: Wilson, Gary, COL, OSD/RA GWilson(a)osd.pentagon.mil Cc: betty(a)infowar.com Subject: Re: Chemical Warfare Agents Chemical Warfare Agents An overview of chemicals defined as chemical weapons >> Main Groups >> >> Nerve Agents >> Mustard Agents >> Hydrogen Cyanide >> Tear Gases >> Arsines >> Psychotomimetic Agents >> Toxins >> Potential CW Agents >> What is a Chemical Warfare Agent? A United Nations report from 1969 defines chemical warfare agents as " ... chemical substances, whether gaseous, liquid or solid, which might be employed because of their direct toxic effects on man, animals and plants ... ". The Chemical Weapons Convention defines chemical weapons as including not only toxic chemicals but also ammunition and equipment for their dispersal. Toxic chemicals are stated to be " ... any chemical which, through its chemical effect on living processes, may cause death, temporary loss of performance, or permanent injury to people and animals". Plants are not mentioned in this context. Toxins, i.e., poisons produced by living organisms and their synthetic equivalents, are classed as chemical warfare agents if they are used for military purposes. However, they have a special position since they are covered by the Biological and Toxin Weapons Convention of 1972. This convention bans the development,production and stockpiling of such substances not required for peaceful purposes. Today, thousands of poisonous substances are known but only a few are considered suitable for chemical warfare. About 70 different chemicals have been used or stockpiled as CW agents during the 20th century. Today, only a few of these are considered of interest owing to a number of demands that must be placed on a substance if it is to be of use as a CW agent. A presumptive agent must not only be highly toxic but also "suitably highly toxic" so that it is not too difficult to handle. The substance must be capable of being stored for long periods in containers without degradation and without corroding the packaging material. It must be relatively resistant to atmospheric water and oxygen so that it does not lose effect when dispersed. It must also withstand the heat developed when dispersed. >> "War Gases" are Seldom Gases >> CW agents are frequently called war gases and a war where CW agents are used is usually called a gas war. These incorrect terms are a result of history. During the First World War use was made of chlorine and phosgene which are gases at room temperature and normal atmospheric pressure. The CWagents used today are only exceptionally gases. Normally they are liquids or solids. However, a certain amount of the substance is always in volatile form (the amount depending on how rapidly the substance evaporates) and the gas concentration may become poisonous. Both solid substances and liquids can also be dispersed in the air in atomized form, so-called aerosols. An aerosol can penetrate the body through the respiratory organs in the same way as a gas. Some CW agents can also penetrate the skin. This mainly concerns liquids but in some cases also gases and aerosols. Solid substances penetrate the skin slowly unless they happen to be mixed with a suitable solvent. Effects on Vegetation Flowers and leaves of some plants may change colour if they are exposed to droplets of a CW agent in an attack. Light or matt spots may occur as well as brown discoloration, particularly on leaves. Entire trees, or parts of them, may also get brown discoloration in situations of strong exposure. The discoloration often arises within a few minutes but may also occur after some days. Classification CW agents can be classified in many different ways. There are, for example, volatile substances, which mainly contaminate the air, or persistent substances, which are involatile and therefore mainly cover surfaces. CW agents mainly used against people may also be divided into lethal and incapacitating cathegories. A substance is classified as incapacitating if less than 1/100 of the lethal dose causes incapacitation, e.g., through nausea or visual problems. The limit between lethal and incapacitating substances is not absolute but refers to a statistical average. In comparison, it may be mentioned that the ratio for the nerve agents between the incapacitating and lethal dose is approximately 1/10. Chemical warfare agents are generally also classified according to their effect on the organism. In order to achieve good ground coverage when dispersed from a high altitude with persistent CW agents the dispersed droplets must be sufficiently large to ensure that they fall within the target area and do not get transported elsewhere by the wind. This can be achieved by dissolving polymers (e.g., polystyrene or rubber products) in the CW agent to make the product highly-viscous or thickened. The result will be that the persistence time and adhesive ability increase which thus complicates decontamination. Although it may appear that a CW agent can be "custom-made" for a certain purpose, this is not the case. Instead, there is always some uncertainty about the persistence time, the dispersal and the effect. These Military Chemicals are Not Considered to be Chemical Weapons Incendiary agents such as napalm and phosphorus are not considered to be CW agents since they achieve their effect mainly through thermal energy. Certain types of smoke screen may be poisonous in extremely high concentrations but, nonetheless, smoke ammunition is not classed as a chemical weapon since the poisonous effect is not the reason for their use. Plants, microorganisms, algae, etc. which produce toxins are not classed as chemical weapons even if the produced toxins belong to that class. Pathogenic microorganisms, mainly viruses and bacteria, are classed as biological weapons. -------------------------------------- From: "Wilson, Gary, COL, OSD/RA" <GWilson(a)osd.pentagon.mil> Subject: Iraq: WMD Date: Fri, 1 Nov 1996 08:24:37 -0500 WASHINGTON (AP) -- Before and during the 1991 Persian Gulf War, truck convoys carried Iraqi chemical and biological weapons, as well as nuclear material to safe haven in Iran, according to U.S. intelligence documents. > "The trucks were camouflaged with mud during their travel through Iraqi >territory," said the report placed Thursday on the Internet. "The convoy moved >only at night. The mud was washed off after re-entry into Iranian territory." > The report said "at least 14 trucks were identified as having nuclear, >biological and chemical cargo. Boxes labeled 'tularemia,' 'anthrax,' 'botulinum' and 'plague' were loaded into containers." > The trucks were driven by Iranian civilians who turned them over to Iranian >Revolutionary Guards. > That account was among more than 200 documents placed on the Internet over >the objections of the CIA. They were put on the worldwide computer network by >publisher Bruce W. Kletz, who plans to put out a book by a former CIA analyst, >Patrick Eddington. > Eddington asserts that the agency has hidden evidence that American troops >were exposed to Iraqi chemical weapons. > "These documents are still under review," CIA spokesman Mark Mansfield said. >"We consider portions of them to be classified." > The Pentagon originally put the material on the Internet and then withdrew it in February when the CIA objected to making it public. > While numerous studies have found no conclusive evidence that Iraqi forces >used chemical or biological weapons against U.S. troops during the 1991 war, it >is feared U.S. forces could have been exposed to nerve gas as they destroyed an >Iraqi munitions dump after the war's end. > Iraq's transfer of material to Iran was a new example of cooperation between >two countries that fought an eight-year war but became covert allies when a >U.S.-led coalition demanded that Iraq withdraw forces that occupied Kuwait in >August 1990. > During the ensuing Persian Gulf War, Iran allowed Iraqi planes to land on its territory to escape destruction by coalition forces. The planes were not allowed to rejoin the Iraqi military during the conflict. > The documents did not shed new light on whether U.S. forces came into contact with Iraqi chemical weapons. But they did show the concern about Iraq's ability to manufacture and deploy such weapons. > One document cited a defector's account that "at least one chemical company >is attached to each (Iraqi) division." > Russia may have supplied biological warfare technology to Iraq and North >Korea, according to a report written in 1994. "It was believed that the >technology transfer commenced several years prior to April 1992 and was still in progress during April 1992," the report said. > The material also indicated the government had evidence that Iraq had moved >chemical weapons into Kuwait. > One report in January 1991, from an Iraqi national, said that chemical land >mines had been loaded for shipment to Kuwait. The report said the information >"cannot be confirmed." > In September 1990, less than two months after Iraq occupied Kuwait, evidence >was seen that "Iraqi forces may be conducting chemical decontamination >exercises. They could be preparing for a chemical attack." > During the same period, when the United States and its allies were massing >forces in the Persian Gulf region, U.S. officials were concerned that terrorists >allied with Iraqi President Saddam Hussein would stage attacks on allied forces. > > Among the records returned to the Internet is a Nov. 3, 1995, memo written by Paul Wallner, a Pentagon official heading an oversight panel dealing with Gulf War veterans' illnesses. > Noting that various military officials and departments had "expressed concern about potential sensitive reports or documents on GulflINK," the Persian Gulf War web site, Wallner recommended certain steps to "allow the investigation team time to begin preparation of a response on particular 'bombshell' reports." > According to the memo, a host of material would be subject to further review, including "documents containing releasable information which could embarrass the government or DoD," the Department of Defense. > It also warned that additional scrutiny would be needed on documents "that >could generate unusual public/media attention" or those "which seem to confirm >the use or detection of nuclear, chemical or biological agents." ------------------------------------------------------- Notes from Moderator: 1. GulfLINK documents can now be downloaded from infowar.com 2. WEAPONS OF MASS DESTRUCTION IN TERRORISM The Emerging Threat Posed by Non-State Proliferation, James K. Campbell is an interesting read. The article is posted on infowar.com under the What's New section. -------------------------------------------------------- ate: Tue, 29 Oct 1996 12:22:27 -0700 To: winn(a)Infowar.Com From: alm(a)io-online.com Subject: RE: Chemical Warfare Agents Cc: "Wilson, Gary, COL, OSD/RA" <GWilson(a)osd.pentagon.mil>, betty(a)infowar.com, 'Ron Lewis' <INTELLIGYST(a)worldnet.att.net> I think we have an excellent example of the psychological impact of chemical weapons in the case of Israel right now. The news statements about land for peace in the Golan came shortly after new gas masks were issued in Israel and I got curious. I went back and checked the news database and found that speeches recomending not serving in the IDF, that students should leave Israel, and a wide variety of other self defeating actions peaked at about one week after news of chemical weapons threats, issueing of gas masks, and other news of this type appeared in the papers there. This comes after a long period of stress and being on high alert. Early reactions seem to be panic, after a period of such stress it seems make people (at least in this situation) turn in on themselves, willing to abandon strongly held beliefs, etc. without knowingly tieing it to the threats. The attacks seemed aimed not at the threats but at the government of Israel; yet, they are tied time-wise to increased pressure. This was traced over a two year period which gives some validity rather than a one-time relationship. I hate to say it, but this is an excellent laboratory for a variety of such studies as it isn't artificial and its one of the few places where open information is available on on-going threats of various types. Sociologists have already done studies on behavior in society and such using this lab. Alijandra ------------------------------------------------------ END Infowar Sunday, November 10 1996 Volume 01: Number 01 DIRECT REQUESTS to: list(a)infowar.com with one-line in the BODY, NOT in the subject line. Subscribe infowar TO JOIN GROUP Unsubscribe infowar TO LEAVE GROUP Help infowar TO RECEIVE HELP TO POST A MESSAGE: E-Mail to infowar(a)infowar.com _____________________________________________________ Infowar.Com Interpact, Inc. Winn Schwartau winn(a)infowar.com http://www.infowar.com 813-393-6600 Voice 813-393-6361 FAX Sponsor Opportunities/Comments/Help Betty G. O'Hearn Assistant to Winn Schwartau http://www.infowar.com betty(a)infowar.com 813-367-7277 Voice 813-363-7277 FAX -------------------------------------------------------------------------- 2 Message:0002 2 -------------------------------------------------------------------------- To: infowar(a)infowar.com From: "Betty G. O'Hearn" <betty(a)infowar.com> Subject: Infowar Digest Vol. 1 #2 infowar(a)infowar.com=20 Sunday, November 10 1996 Volume 01: Number 02 We thank our sponsors: National Computer Security Association OPEN SOURCE SOLUTIONS New Dimensions International - Security Training Secure Computing Corporation HOMECOM Communications Internet Security Solutions __________________________________________________ Infowar(a)infowar.com is brought to you in the the interest of an open,= unclassified exchange of information and ideas as a means for advancement= of Information Warfare related issues. Topics of discussion for this list= include: Infowar, Electronic Civil Defense, Hacking, Defensive Techniques,= Policy, Non-Lethals, Psyops, Chemical Warfare Agents and WMD.=20 As the list expands we will adapt to the needs and desires of our= subscribers.=20 This is a DIGEST format. __________________________________________________________ Contents Vol. #1 No.2 infowar Original Allegations - Flt 800 Disaster infowar Propaganda and TWA/CIA-Cocaine infowar Electronic Civil Defense ------------------------------------------- To: winn(a)Infowar.Com Date: 8 Nov 1996 14:33:38 CST Subject: Original Allegations - Flt. 800 Disaster ENN Special Report 11/08/96 - 13:45CST Original Allegations of Friendly Fire Came From Alleged Iranian Propagandist (ENN) In light of yesterday's statements by former JFK Press Secretary Pierre Sallinger, the Emergency Response & Research Institute conducted an internal literature review of documents regarding the TWA Flight 800 disaster. This internal probe included e-mail, newsgroup postings,press= reports, and consultations with experts, received from numerous sources. = It revealed that the original allegations of a U.S. Naval "friendly fire= incident" came from an alleged Iranian/Extremist Moslem propagandist named= Parveez Syad, aka Parveez Hussein, who was operating from a base in= Birmingham, England at the time. Interestingly, Mr.Hussein/Syad= distributed these allegations widely on the Internet within 48 hours of the= incident and made what appeared to be premature accusations that the United= States was already engaged in a "cover-up." Mr. Hussein/Syad's current whereabouts are unknown, and it is believed that he may have been the subject of a government investigation in England. Concerns were raised, at the time, by ERRI analysts that Mr. Syad/Hussein may have been engaged in an "disinformation" campaign in an= effort to deflect attention from possible moslem extremist involvement in the bombing of Flt. 800. Subsequent inquiries and examinations by ERRI seem to verify that there was a concerted "foreign" effort to obscure= and confuse a number of issues involved in the Flt. 800 investigation. Speculation continues among experts in regard to the authenticity of the alleged U.S. government documents that are reportedly in the possession of Mr. Sallinger. Without examination of these documents, ERRI analysts say that further confirmation of Mr. Sallinger's statement is difficult at best. One purposefully unidentified consultant told ENN that it is even possible that Mr. Sallinger and French intelligence agents may have been "duped" by a "foreign effort." U.S. Navy and FBI officials have both "catagorically denied" any viable evidence of a "friendly fire" incident or of any sort of "cover-up" on the part of the U.S. government. James Kallstrom announced today that he would welcome any additional information or evidence that Mr. Sallinger or others might have in regard to the Flight #800 tragedy. EmergencyNet News Service (ENN) Emergency Response & Research Institute (ERRI) 6348 N. Milwaukee Ave., #312 Chicago, IL. 60646 (773) 631-3774 - Voice (773) 631-4703 - Fax (773) 631-3467 - Modem/Emergency BBS On-Line ------------------------------------- Date: Fri, 8 Nov 96 16:26 EST From: Michael Wilson <0005514706(a)mcimail.com> To: G-TWO List Members <g-two(a)majordomo.netcom.com> Subject: Propaganda and TWA/CIA-Cocaine Many of you may be dealing with questions regarding the two matters, so I thought I would make this available to you. --- Two recent events in the media are prompting my writing a very brief= commentary: allegations of a cover-up in the TWA Flight 800 disaster and the alleged=20 CIA-Cocaine connection into the L.A. urban environment. My comments will be= directed at the propaganda value of these media events, as I'm currently= engaged in writing a primer on propaganda, and these make interesting case= studies. Modern propaganda comes in many forms, but of primary concern in these two= cases are: - 'Mobile truth,' or the reinterpretation of events (revisionist history), a= =20 common feature on the Internet, which is increasingly becoming an entry= point into the more conventional media; - Psyops in support of operations, including spin control, after action= reports,or informative accounts when the media is controlled by= intelligence and law enforcement; - The digital nature of media--text, photographs, video, audio--has= undermined the ability to establish the reality of what they represent as= observational proxies. This has recently been termed the 'fictive= environment' by the military, and I'll use the term for lack a better one. Let me discuss the two cases in terms of these points: TWA 800 Ever since Flt. 800 went down, the conspiracy theorists have been out on the= Internet, alleging everything from a Syrian missile to a 'friendly fire'=20 accident. Part of these allegations have been blind assertions, but some= have=20 been backed up with 'proof' that entails supposed photographs and internal= =20 government documents. Mobile truth: in the absence of public facts or knowledge, speculation has= run wild. As usual, everyone's favorite pet suspect emerges--terrorists,= the U.S. Navy, government cover-ups, etc. This 'playing to the audience'= has received wide audience and coverage, because it is media hot--it= attracts a lot attention simply because it receives attention in the= viewers, readers, etc. in a self-fulfilling way. It plays on public and= hidden fears; provides simple=20 solutions; gives an enemy to hate, react against; it justifies the beliefs= and=20 agenda of many. The only solution is to provide facts, hopefully answers; of= =20 course, this is antithetical to the investigatory (scientific and criminal)= =20 process. This vacuum of data is being capitalized on by individuals or=20 organizations who know that the official channels are going to be closed to= the public--their motive is something I have no desire to quantify. PsyOps: this game is lose-lose for everyone; the public is confused and= angered, the investigation is hampered or discredited, the sources of the= false information will eventually be shown to be wrong (although they will= launch secondary operations to manage this as well, alleging further= cover-up, conspiracy, and so forth). What happens though is a continual= lessening of the resistance in the information environment to future psyops= operations, and this is the long term benefit sought by the perpetrators.= Confidence in the government is at an all time low--post Viet Nam,= Watergate, Iran-Contra, Whitewater, etc. The readiness to believe the worst= becomes greater and greater, and public mental health suffers. Fictive environment: while ground truth comes from direct observation, we're= becoming more dependent upon observational proxies than ever= before--photos, audio, video, documents, etc. The memories of observers is= a questionable thing at best (the madness of crowds), but digital trickery= are removing the trust values that we, only a few years ago, were able to= place in 'more reliable' materials. In the case of TWA, just as in most any= case, the creation or faking of evidence requires only modest skills and a= personal computer. Photos can be digital from their origin, and once= transferred into a computer with the right software, they can be merged or= altered in ways that are=20difficult to refute, even when false. Documents= are trivial to manufacture; elements used for provenance, showing a truth= and history of origin, can be falsified in a variety of ways (optically= scanning letterhead or signature, creation from scratch by matching= typeset, etc.), and the textual body can be anything imagined (and textual= analysis or comparison is commonly beyond the capabilities of the= audience). Video and audio are slightly more complex (in levels of effort);= video modification, loosely based on the same technology used to alter= photographs, requires greater skill and more powerful equipment, but is= gradually coming into the range of the average consumer, just as audio= sampling and modification technology has reached the 'garage' level. All= this calls into question any materials of physical evidence, but those= distributed over the Internet are particularly ntrustworthy--even the lower= resolution of net-distribution works to the advantage of the creation of= such materials. I expect this problem to have increasing impact as time= goes on, including in criminal and civil cases (for instance, in the Yousef= case in New York, where he claimed his computer files were faked, or the= potential falsification of photographic evidence in the Simpson civil= trial). In short, the discussion and materials on/using the Internet have done= little to advance the search for the truth of the matter in TWA 800, and= have done much harm (diverting critical manpower from the investigation,= damaging the credibility of the investigation, etc.). CIA-Cocaine connection TWA and this accusation actually have much in common from a propaganda= standpoint. The allegation (made by the San Jose Mercury News) was that= assets associated with the CIA-backed effort in support of the Contras were= trafficking in cocaine, which helped to finance the (c)overt war. In= particular, the cocaine smuggled into the U.S.A. was supposed to have been= converted into the 'crack' or rock (smokable) form, and introduced into the= African-American urban setting in Los Angeles, with the undertones being= that it was a conspiracy to undermine the solidarity of the A-A community. Mobile truth: the basic assertion never actually connected the CIA with any= =20 involvement or trafficking, yet the implication (made indirectly or= directly,=20 depending on the source) was that it was a tacit CIA operation. Far be it= for me to write the apologia for the Agency, but not only is the supposed= action=20 illegal and immoral, it is also highly unlikely. Creative interpretation of= the=20 events allowed a rather clever ontological judo--the all-powerful,= all-knowing CIA either had to admit they had no idea what their assets were= involved in (thus damaging the all-knowing aspect of their reputation);= they could admit to knowledge but inaction (thus criminal facilitation, or= having to say that sometimes they need the help of 'bad' people, not a= politically correct position); or they could deny any involvement, and= foster the continual suspicion of cover-up, conspiracy, and hidden agendas.= Any way they move, they lose. This is again a position where history has= created an impression that the Agency would perform the worst action in= support of their own agenda,=20and then actively protect themselves from= investigation; no amount of reform or whitewashing can reverse the trend.= The strength of this attack on the credibility of the Agency is that it= plays so well with public impressions of the Agency, appears to fit the= profile of previous Agency violations of public trust, but can't be= defended against because of the secrecy requirements of the Agency, and the= improbable success of proving a negative assertion (that the Agency wasn't= responsible). PsyOps: a factor to consider is that the accusations were made during an=20 election period in a key state where the issue solidified a constituency= into a=20 solid position against their 'traditional' opposition. The issue is very= much a=20 political one, and directed at rekindling public animosity about past deeds= (and misdeeds) to shape current public impressions. Again, the long term= casualties of all this are the public trust and credibility of a key but= troubled Agency; politically expedient attacks which undermine the= political process; and the continued progression of the perversion of the= information environment. Fictive environment: no proof was actually offered (mostly proof by= assertion, as well as collateral association), but the very absence of= proof feeds in to the mobile truth and psyops elements of the operation.= Clearly no public documentation and argument could be offered from an= Agency that must maintain its security and integrity, and no proof could be= offered to prove the Agency wasn't involved, a negative assertion (a common= element in this sort of propaganda operation). The CIA, Congress, and Justice Department are now engaged in investigations= of the allegations; as such, they will be on-going events to continue the= propaganda campaign, with a predictable end--the Agency finds no proof in= their records and interviews, which is then interpreted as continuing= evidence of a cover-up and conspiracy. Conclusion-- Media manipulation, particularly using the Internet as a method= of propagation of the propaganda message or as an entry point into the= conventional media cycle, is becoming more of a problem. Clearly everyone= suffers, and the general atmosphere of distrust and disbelief, not to= mention disgust, prevail. Michael Wilson 5514706(a)mcimail.com ------------------------------------------ To: infowar(a)infowar.com From: winn(a)infowar.com Date: November 8, 1996 Subj: Electronic Civil Defense Becomes a National Issue In June of 1991, I testified before Congress that unless we moved forward as= a nation, we faced the possible specter of an "Electronic Pearl Harbor."= Five years to the day later, that same phrase was used by John Deutch and= others to wake up Congress and America that indeed a new concept of= national security has evolved as the Cold War wound down. I recently ran into a Libertarian friend and lawyer who was somewhat upset= with me. "You are single handedly responsible for the backlash and efforts= of law enforcement to take away our personal freedoms." He was referring to= the comments made by FBI Director Louis Freeh, that additional electronic= eavesdropping capabilities were needed to thwart the threats of domestic= terrorism. He also referred to various law enforcement concerns that unless= US citizens voluntarily complied with a Key Escrow scheme of some variety,= it might be necessary to legislate a common cryptographic system which= would not interfere with government investigations into crime and= terrorism. "So, it's all my fault?" I asked him in the presence of others. He paused, and with only a twinge of humor said, "yes." Well, I do not believe or accept for a moment that the work we have done in= the last several years is solely responsible for the extreme measures being= discussed, but my friend's concerns are legitimate and must be addressed.= He is keenly concerned, as many of us are, that recent headline grabbing= events may trigger law enforcement to overreact and with the emotional= support of many Americans, permit laws to be passed that a few short years= ago we never would have tolerated. Civil Libertarians are quick to point out that if we permit law enforcement= to regain unbridled powers of electronic eavesdropping, we provide them= with the capability of abuse. "Today's government may be fine. But we don't know about tomorrow's= government." They openly refer to the abuses of the Hoover FBI where, most= of will admit, things did get out of hand. I've met with CIA case officers= who feel hamstrung by their inability "to get the job done" in an effective= way, because they are paying for the sins of their predecessors. Most of= the FBI agents I know understand the legitimate fears of the civil= liberties groups, but also know that they must have increased access to= technology to defeat criminal activities. The issue comes down to one of balance. Pure and simple. "Whom do you trust"= is a high profile collateral issue.=20 But let's understand what has catalyzed much of these moves on the part of= law enforcement: - The Oklahoma City bombing - The World Trade Center bombing - The Lockerbie Tragedy - The US Military Bombing in Saudi Arabia - TWA Flight 800 - The Olympic Bombing These events trigger deep emotional responses on the part of most Americans= and a call for action. "What can we do?" "Do something." "This shouldn't= happen in America." "Protect us." And the predictable response from law= enforcement is to ask for additional powers. Balance. It's all about= balance. The critics say that Law Enforcement can push electronic taps past friendly= judges with little inquiry on their part. The FBI says it takes a mass of= paper work and evidence to convince a judge. There were less than 2,000= phone taps issued last year - and I guess I feel that's not a whole lot.= 260,000,000 people, less than 2,000 taps. You add it up.=20 Resources on the part of law enforcement are pretty scant. They do not have= the budget or manpower to indiscriminately tap phones everywhere and= analyze their contents. It's manpower intensive. They have to be selective.= In many ways I wish they listened in on more of the bad guys. On one phone= tap, an FBI agent told me, their target said in a taped conversation, "hey,= the feds are tapping the phone. Let's whisper." Bad guys are not all rocket= scientists. But on a national scale, we do indeed face a new risk, a new vulnerability,= for which my friend blames me. It's all my fault. Right. In "Information= Warfare" and other works, I maintained that the civilian infrastructure was= the unacknowledged target of future adversaries. I don't believe we will see Submarines sailing up the Potomac, or that enemy= planes will come into San Francisco Bay. Just won't happen. But I fear we= will see attacks against the econo-technical infrastructure, affecting not= only we citizens, but the ability of law enforcement and the military to= function as we wish them to. On July 15 of this year, President Clinton issued an Executive Order calling= for the Establishment of President's Commission on Critical Infrastructure= Protection. I applaud much of it, but I also think we have to maintain caution on how it= is effected. His order says: Certain national infrastructures are so vital that their incapacity or= destruction would have a debilitating impact on the defense or economic= security of the United States. These critical infrastructures include: telecommunications, electrical power systems, gas and oil storage and transportation, banking and finance, transportation, water supply systems, emergency services (including medical, police, fire, and rescue), and continuity of government. Threats to these critical infrastructures fall into two categories: 1. physical threats to tangible property ("physical threats"), 2. and threats of electronic, radio-frequency, or computer-based attacks on= the information or communications components that control critical= infrastructures ("cyber threats"). Because many of these critical infrastructures are owned and operated by the= private sector, it is essential that the government and private sector work= together to develop a strategy for protecting them and assuring their= continued operation. This part of President Clinton's statement is right on the mark. These are= all critical structures of the macro-sized econo-technical infrastructure,= of which the NII and other bits are sub-infrastructures. However, when it= comes to forming a committee, the people and groups he wishes to handle the= problem are quite government-centric. - Department of the Treasury; - Department of Justice; - Department of Defense; - Department of Commerce; - Department of Transportation; - Department of Energy; - Central Intelligence Agency; - Federal Emergency Management Agency; - Federal Bureau of Investigation; - National Security Agency. The committee members are to include: - Secretary of the Treasury; - Secretary of Defense; - Attorney General; - Secretary of Commerce; - Secretary of Transportation; - Secretary of Energy; - Director of Central Intelligence; - Director of the Office of Management and Budget; - Director of the Federal Emergency Management Agency; - Assistant to the President for National Security Affairs; - Assistant to the Vice President for National Security Affairs. The immediate concern I see is that the government wants to take charge on= an issue and threat that is of mutual concern to the private sector and the= government, but that at the highest levels of the President's Order and his= Committee, we see no private sector representation. It is merely on a= consultory basis. The Commission shall: (a) within 30 days of this order, produce a statement of its mission= objectives, which will elaborate the general objectives set forth in this= order, and a detailed schedule for addressing each mission objective, for= approval by the Steering Committee; (b) identify and consult with: (i) elements of the public and= private sectors that conduct, support, or contribute to infrastructure= assurance; (ii) owners and operators of the critical infrastructures; and= (iii) other elements of the public and private sectors, including the= Congress, that have an interest in critical infrastructure assurance issues= and that may have differing perspectives on these issues; (c) assess the scope and nature of the vulnerabilities of, and= threats to, critical infrastructures; (d) determine what legal and policy issues are raised by efforts to= protect critical infrastructures and assess how these issues should be= addressed; (e) recommend a comprehensive national policy and implementation= strategy for protecting critical infrastructures from physical and cyber= threats and assuring their continued operation; (f) propose any statutory or regulatory changes necessary to effect= its recommendations; and (g) produce reports and recommendations to the Steering Committee as= they become available; it shall not limit itself to producing one final= report. I first wrote a National Infomation Policy in 1993, and I am pleased to see= that the President has included similar wording. However, a national policy= must, on balance, also provide for enhanced personal electronic security= for the average American. It cannot be a one-sided law enforcement issue.= =20 I worry about "consult with industry" along the same lines that the Key= Escrow adherents consulted with industry, but generally did what they= wanted to anyway. This has been an ongoing battle between industry and the= White House with respect to "Clipper" style proposals and export control= over encryption. Do we face the same situation with the Infrastructure= Protection Committee? In this same vein, the President did recognize some input by the private= sector: (a) The Commission shall receive advice from an advisory committee= ("Advisory Committee") composed of no more than ten individuals appointed= by the President from the private sector who are knowledgeable about= critical infrastructures. The Advisory Committee shall advise the= Commission on the subjects of the Commission's mission in whatever manner= the Advisory Committee, the Commission Chair, and the Steering Committee= deem appropriate. Again, the structure is that the government is in charge and the private= sector, whose very interests are at stake here, is reduced to an Advisory= status. This is a keen focus of concern. But then, a surprising phrase was in the President's Order: (f) The Commission, the Principals Committee, the Steering Committee, and= the Advisory Committee shall terminate 1 year from the date of this order,= unless extended by the President prior to that date. Only a year. I've been at this for years and years, and the awareness= process takes significant time. There are still major players both in the= government and the private sector who do not understand the nature of the= threats and vulnerabilities, and I fear that a mere one year effort, led by= some of the busiest people in the country today, will not receive the= attention it deserves. My Civil Libertarian lawyer friend had significant problems with the= following portion of the President's Order (for which I am blamed, of= course!). (a) While the Commission is conducting its analysis and until the President= has an opportunity to consider and act on its recommendations, there is a= need to increase coordination of existing infrastructure protection= efforts in order to better address, and prevent, crises that would have a= debilitating regional or national impact. There is hereby established an= Infrastructure Protection Task Force ("IPTF") within the Department of= Justice, chaired by the Federal Bureau of Investigation, to undertake this= interim coordinating mission. (d) The IPTF shall include at least one full-time member each from the= Federal Bureau of Investigation, the Department of Defense, and the= National Security Agency. It shall also receive part-time assistance from= other executive branch departments and agencies. Members shall be= designated by their departments or agencies on the basis of their expertise= in the protection of critical infrastructures. IPTF members'= compensation shall be paid by their parent agency or department. "Oh, great!" he exclaimed. "Now we're gonna have the Army sitting with= M-16's outside the phone company, and the NSA listening in on Americans to= see if they pollute the water supply. This is too damned much." He= shuddered at the thought of having the these three groups working together= on a domestic basis. It brought back to him too many memories of bygone= days he would like to see remain in the past. On the other hand, what better group than the DoD to head up an effective= response organization? The President, rightfully so, put the FBI and the= Dept. of Justice in charge of the IPTF; after all they are responsible for= domestic national law enforcement. But the DoD has massive resources,= capabilities and manpower to deploy in times of trouble. The trouble is, and we will have to face this dilemma straight on, is that= the US Military cannot be deployed in domestically due to the Posse= Comitatus Act of 1878, without an Executive Order. And the NSA is similarly= restricted from domestic operation, but is standing up its own 1,000 man= Information Warfare division.=20 There are legitimate ways around these problems, and we do need to have= built-in oversights to satisfy the concerns of those who don't want the= government taking over the whole shebang. But the concept of the IPTF's= mission is again, absolutely on mark. (e) The IPTF's function is to identify and coordinate existing expertise,= inside and outside of the Federal Government, to: (i) provide, or facilitate and coordinate the provision of, expert guidance= to critical infrastructures to detect, prevent, halt, or confine an attack= and to recover and restore service; (ii) issue threat and warning notices in the event advance information is= obtained about a threat; (iii) provide training and education on methods of reducing vulnerabilities= and responding to attacks on critical infrastructures; (iv) conduct after-action analysis to determine possible future threats,= targets, or methods of attack; and (v) coordinate with the pertinent law enforcement authorities during or= after an attack to facilitate any resulting criminal investigation. The Committee is supposed to address the very issues that many of us have= been addressing - to full audiences, but often empty years. From where I= stand, the White House has caught the vision and it prepared to do= something about it. My complaints are essentially two fold: 1. We have to have greater civilian input and representation on the= Committee at the highest levels, not merely in an advisory capacity. 2. The 1 year term is short-sided. And yes, I do agree with my Libertarian pal, that however this all shakes= out, we must have a third party oversight process to insure we never do= return to the abusive days of yore. Kudos to the White House for putting Electronic Civil Defense on their= plate. For a complete copy of the Presidential Order: http://www.infowar.com Winn Schwartau ------------------------------------------------------------ END Infowar Sunday, November 10 1996 Volume 01: Number 02 DIRECT REQUESTS to: list(a)infowar.com with one-line in the BODY, NOT in the subject line. Subscribe infowar TO JOIN GROUP Unsubscribe infowar TO LEAVE GROUP Help infowar TO RECEIVE HELP=20 TO POST A MESSAGE: E-Mail to infowar(a)infowar.com =20 _____________________________________________________ Infowar.Com Interpact, Inc. Winn Schwartau winn(a)infowar.com http://www.infowar.com 813-393-6600 Voice 813-393-6361 FAX Sponsor Opportunities/Comments/Help Betty G. O'Hearn Assistant to Winn Schwartau http://www.infowar.com betty(a)infowar.com 813-367-7277 Voice 813-363-7277 FAX

2 1

Re: ideal secure personal computer system
by tom bryce 17 Dec '03

17 Dec '03

> = ph(a)netcom.com (Peter Hendrickson) wrote: >> = tom bryce wrote: >> (2) Partition the hard drive into two partitions: >> install the system folder on one and a copy of CryptDisk >> make this the startup partition and make it READ ONLY with aliases to >> folders you want to be modiyfable (such as Eudora Folder in the sys >>folder) >> place these folders on the encrypted partition > >I don't think you will be able to do this. I have heard that too many >things modify files in the system folder for this to work. It wouldn't >surprise me if the OS modifies its own boot file from time to time. > >I'm not expert. If you get this working I would appreciate it if you >were to post it to the list or let me know directly. -and- >Watch out for the clipboard which appears to be stored as a file in >the system folder. Unfortunately, it has to be a real file - aliases >not allowed. This makes it harder to have a read only system folder >and, of course, every time you cut and paste something you leave a >ghost on the disk for an undefined length of time. It's hard to >work on the Mac without using the clipboard. The fact that you can start up and run your system from a CD rom proves that you can lock your startup disk. Grab a DISK TOOLS disk from your most recent system installer disks (mine is 7.5) and flip the write protect tab, then start up from it. Clipboard works, too. I haven't worked with such a system extensively enough to see if there are any glitches (such as copying large amounts of stuff to the clipboard, etc.) but it should get the job done for the truly paranoid. I have a few items in the system folder presently aliased out onto other disks - my Eudora Folder is on an encrypted partition, and there's no reason one couldn't do this with the whole preferences folder and other stuff. >> If locking the startup volume turns out to be too much of a pain, one could >> install trashguard from Highware software and set it to triple overwrite >> deleted files, and otherwise not lock the startup partition. > >I'm guessing you already know this, but once you've written something >to the disk you might as well assume it's there forever. Triple overwrite >of files will defeat Norton Utilities, but may not stop a determined >opponent. Right. I'm proposing this as a compromise if you wish to trade security for convenience. >Commercial data recovery services claim to be able to recover data >after nine formats of the disk. It is difficult to say for certain >what the technical limits of this technology are. For instance, maybe Colin Plumb gave me estimates of what you needed to wipe a disk clean once, which he researched for SFS. It depends on whether the erasure pattern is custom designed for the data to wipe. It was something vaguely like (don't quote me) 15 passes if custom designed, and 25 if not. This refers, as I recall, to data freshly written to the disk. Data that hangs out for a while 'leaks' deeper into the disk, with adjacent molecules becoming aligned further between tracks and deeper into the disk and is harder to erase. A dejanews search under colin's name should yield his extensive posts on this topic. Tom

1 0

FUCK ME HARD
by Igor Chudov ＠ home 17 Dec '03

17 Dec '03

FUCK NME HARD

2 1

hahaha
by nobody＠cypherpunks.ca 17 Dec '03

17 Dec '03

test

1 0

Re: Dr. Vulis
by jim bell 17 Dec '03

17 Dec '03

At 06:59 PM 11/5/96 +0100, Gary Howland wrote: >> > I recall we've been through this over a year ago, when I saw an announcement >> > of a cypherpunks physical meeting where someone was excluded for his political >> > views, and I said that I don't consider myself a cypherpunk. I'm glad that >> > John and Bill, the auhorities on cypherpunk membership, finally concur. > > >I think he is referring to the explicit and public non-invite of Jim >Bell to a cypherpunks meeting, due to some of Jim Bell's Assination >Politics posts. >Gary I'd like to correct this impression. Alan Olsen was, apparently, quite aware of my AP posts when I (and everyone else) was invited to the first Portland CP meeting. I had heard no objection to them from him. The meeting was advertised as being sufficiently confidential that he specifically requested that nobody take pictures or record the meeting, etc. Fair enough, I thought. I generally interpreted this to mean that the meeting was at least approximately "off the record." Arriving at the meeting, I detected no indication that Alan Olsen was at all disturbed at me, or anything I had said previously. At the meeting all went well, _or_so_I_thought_. It was all very routine. One thing I decided to mention, actually only hint at, was a technical capability that I was working one. However, I gave merely the broadest hints; What I did say would certainly have sounded technically at least implausible, if not quite impossible. (The situation was somewhat analogous to the old story about the blind men coming across an elephant; one touches only the tail and calls it a snake, the other touches a leg and calls it a tree, etc.) Intentionally, I didn't explain how I would accomplish the goal I described. Even so, there was still no indication from Alan Olsen that anything was amiss. And the meeting ended on that note. Much to my surprise, Alan Olsen blurted out over the CP list only a barely fair description of what I had said (which itself was only the hints I chose to describe) and called me various names, etc. I think he used the term "voodoo" to describe what I was planning to develop. When, eventually, I _do_ explain the whole thing, and I repeat exactly what I told the assembled group, it will become obvious why what I described _sounded_ so implausible, yet was quite doable given modern technology. I should point out that given how little I told, avoiding the REAL explanation, it could very well have been taken for voodoo. And it didn't surprise me that SOMEBODY would have come to that impression. The surprising and shocking thing about it was that he (Alan Olsen) violated the very confidentiality he had insisted on, without any sort of warning, and after-the-fact. Needless to say, I raked him over the coals publicly, on CP, for having done this, and he was severely chastized because of this. "Ripped him a new one" might describe it, although he certainly deserved the treatment. Obviously, a number of people on this list got the mistaken impression that this disagreement had something to do with my AP proposal. As far as I know, quite the contrary, it did not. But I saw two possibilities, after the fact: One, Alan Olsen hid his disapproval for AP, hoping to catch me in some sort of contradiction. Two, after he was embarrassed by my calling him on his bad behavior, he grabbed at the first thing he could think of to criticize me. Jim Bell jimbell(a)pacifier.com

2 1

Re: WIPO Treaty: Worse than CDA- Deadline 22 Nov 96
by jim bell 17 Dec '03

17 Dec '03

At 01:22 AM 11/11/96 +0000, attila(a)primenet.com wrote: > WIPO Treaty: Worse than CDA > Deadline 22 Nov 96 for comment to Congress > WIPO was introduced this spring to Congress. It is not > understood by either the Clinton administration or the Congress and > few of the public are aware of the problem! [snip] > I am deleting the bulk of the report for brevity, including only > the definition of the "database" as it applies to WIPO. > >.WHAT IS A DATABASE? WHAT ISN'T A DATABASE? >.The treaty would protect "any database that represents a >.substantial investment in the collection, assembly, verification, >.organization or presentation of the contents of the database." >. >.This term should be understood "to include collections of >.literary, musical or audiovisual works or any other kind of >.works, or collections of other materials such as texts, sounds, >.images, numbers, facts, or data representing any other matter or >.substance" and "may contain collections of expressions of >.folklore." The "protection shall be granted to databases >.irrespective of the form or medium in which they are embodied. Somebody must have said, once, that the winner in an argument is the one who gets to define the terms. Notice how the term "protect" and "protection" are misused above. (not by Attila, of course; but by whomever he's quoting.) However, the term "protect" has long been misused by lawyers in just such a way. "Monopolize" would be a more appropriate word under the circumstances. Jim Bell jimbell(a)pacifier.com

2 1

Re: a retort + a comment + a question = [RANT]
by ph＠netcom.com 17 Dec '03

17 Dec '03

At 9:45 PM 11/10/1996, SUCRUM22_at_INDY-ADP(a)smtp-gw.cv62.navy.mil wrote: > ...and you've got a foreign soldier waving a .45 around... Ummm.... just a .45? Peter Hendrickson ph(a)netcom.com

1 0

No Subject
by Mark Neely 17 Dec '03

17 Dec '03

>PLEASE TAKE ME OFF YOUR MAILING >LIST!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! I'm sorry Jayme, but you didn't include the requisite number of !'s, so we cannot process your request. Mark Neely - accessnt(a)ozemail.com.au Lawyer, Internet Consultant, Professional Cynic & Author BizWeb: For Serious Intrepreneurs - www.maximedia.com.au/bizweb

1 0

Re: a retort + a comment + a question = [RANT]
by Murray Hayes 17 Dec '03

17 Dec '03

On Sun, 10 Nov 96 21:45:56 EST, SUCRUM22_at_INDY-ADP(a)smtp-gw.cv62.navy.mil wrote: >---------------------------------------------------------------------- >dave kinchlea wrote: >>As said in "Hair" (the movie), "Don't do it for me man, 'cause >>if the shoe was on the other foot, I wouldn't do it for you!" > >>It's a lie anyway, you do it for yourself. > >That's an _easy_ judgment to make (and i definitely have to stop >adding anecdotes from my life in these things!), but you missed the >point - the freedoms the Cpunks diligently try to preserve (or seem to >want to create...) are protected _by_ the military. who was it that >said: "law, without force, is impotent" -? The military's sole purpose is to destroy things and kill people. Freedom is protected by the poeple for the people some of which are in the military. The force is not nessasary to enforce laws in most circumstances. How many gun battles erupt at speed traps? Granted, there are instances where some force is required in arresting violent individuals, but it is still illeagal for the police to use ecessive force. > >keep in mind that even "bad" laws have to be enforced. you can scream >all you want about "good, strong" cryptostuffs, but if the phone lines >are slashed, the satellite links are down, the elcerticity is off and >you've got a foreign soldier waving a .45 around - just how are you >going to boot up that pretty little computer and make it encode >information for you, much less get it anywhere? anarchy implies >ruthlessness - you going to practice cryptostuffs from a prison cell? You are wrong about bad laws being enforced. Many laws are not enforeced by the police. Have you never been "let off" or "givin a warning" by the police? How many times have you seen people j walk in front of the police who did nothing? Computers are not nessasary to encode data, they just make it a lot eaiser and faster. Where did I put that secret decoder ring???? mhayes(a)infomatch.com It's better for us if you don't understand It's better for me if you don't understand -Tragically Hip

1 0

GAK?
by Mark M. Lacey 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Could someone please fill me in on what GAK stands for since it seems to be central to some of the on going conversations. Thanks, Mark M. Lacey <mml(a)halcyon.com> "Speaking for nobody but myself." [Finger mml(a)halcyon.com for my PGP public key.] [If you don't have 'finger', e-mail me for it.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBMobmyB/Hx+OuZC/tAQGRTAf/R2t+/JC1k3lhQcqIcRWO2HyxHgf6+ko2 2ngQBXyMrInQtaXorcZ2LFrfie4GD68S0nLWKlwqaN09+/O72Bze1pyGd3dHBI4b vazgQZq1zxWuHcCYg1r5QDwt0NJOZg4tRHROHmUiuLLeNfFwusWPnW+RMI2nTo39 g/sXWhRUF83vhyztC5+zOKmxjEQOBf3Wxq0FLBAoSUjzuJKnRNV87Fnf2vzezqc4 cK+A8DcRN0c0kX/LuNO9pnXo+3J8gMMDsoZAOS5KAgWQjJT3fdroTLX4xmRcBVJ3 NanTSXWsFIMlnXAjBS7V+5S/3gAml+y5tqLiNJAhoVVD/nvyvQDmAg== =QyM4 -----END PGP SIGNATURE-----

5 4

Sifting data; looking for "strong crypto"
by Murray Hayes 17 Dec '03

17 Dec '03

As far as bit patterns go, is executable code random? mhayes(a)infomatch.com It's better for us if you don't understand It's better for me if you don't understand -Tragically Hip

7 6

two bogus messages to this list
by ichudov＠algebra.com 17 Dec '03

17 Dec '03

I did not write the two messages below. I did have a small party yesterday, probably some of my guests did that... - Igor. @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ >From cypherpunks-errors(a)toad.com Mon Nov 11 06:35:19 1996 Return-Path: <cypherpunks-errors(a)toad.com> Received: (from root@localhost) by manifold.algebra.com (8.8.2/8.8.2) with UUCP id GAA16814 for ichudov(a)algebra.com; Mon, 11 Nov 1996 06:34:44 -0600 Received: from toad.com (toad.com [140.174.2.1]) by www.video-collage.com (8.8.0/8.8.0) with ESMTP id CAA20037 for <ichudov(a)algebra.com>; Mon, 11 Nov 1996 02:34:30 -0500 (EST) Received: (from majordom@localhost) by toad.com (8.7.5/8.7.3) id VAA01399 for cypherpunks-outgoing; Sun, 10 Nov 1996 21:49:52 -0800 (PST) Received: from www.video-collage.com (www.video-collage.com [199.232.240.107]) by toad.com (8.7.5/8.7.3) with ESMTP id VAA01394 for <cypherpunks(a)toad.com>; Sun, 10 Nov 1996 21:49:47 -0800 (PST) Received: (from uucp@localhost) by www.video-collage.com (8.8.0/8.8.0) with UUCP id AAA19874 for cypherpunks(a)toad.com; Mon, 11 Nov 1996 00:51:53 -0500 (EST) Received: (from ichudov@localhost) by manifold.algebra.com (8.8.2/8.8.2) id XAA15989 for cypherpunks(a)toad.com; Sun, 10 Nov 1996 23:47:00 -0600 Date: Sun, 10 Nov 1996 23:47:00 -0600 From: "Igor Chudov @ home" <ichudov(a)algebra.com> Message-Id: <199611110547.XAA15989(a)manifold.algebra.com> Subject: FUCK ME HARD Sender: owner-cypherpunks(a)toad.com Precedence: bulk Status: O FUCK NME HARD >From cypherpunks-errors(a)toad.com Mon Nov 11 00:35:29 1996 Return-Path: <cypherpunks-errors(a)toad.com> Received: (from root@localhost) by manifold.algebra.com (8.8.2/8.8.2) with UUCP id AAA16188 for ichudov(a)algebra.com; Mon, 11 Nov 1996 00:35:24 -0600 Received: from toad.com (toad.com [140.174.2.1]) by www.video-collage.com (8.8.0/8.8.0) with ESMTP id BAA19940 for <ichudov(a)algebra.com>; Mon, 11 Nov 1996 01:37:38 -0500 (EST) Received: (from majordom@localhost) by toad.com (8.7.5/8.7.3) id VAA00961 for cypherpunks-outgoing; Sun, 10 Nov 1996 21:03:06 -0800 (PST) Received: from www.video-collage.com (www.video-collage.com [199.232.240.107]) by toad.com (8.7.5/8.7.3) with ESMTP id VAA00956 for <cypherpunks(a)toad.com>; Sun, 10 Nov 1996 21:03:03 -0800 (PST) Received: (from uucp@localhost) by www.video-collage.com (8.8.0/8.8.0) with UUCP id AAA19793 for cypherpunks(a)toad.com; Mon, 11 Nov 1996 00:05:09 -0500 (EST) Received: (from ichudov@localhost) by manifold.algebra.com (8.8.2/8.8.2) id WAA15563 for cypherpunks(a)toad.com; Sun, 10 Nov 1996 22:36:03 -0600 Date: Sun, 10 Nov 1996 22:36:03 -0600 From: "Igor Chudov @ home" <ichudov(a)algebra.com> Message-Id: <199611110436.WAA15563(a)manifold.algebra.com> Sender: owner-cypherpunks(a)toad.com Precedence: bulk Status: RO manifold::~==>premail -t cypherpunks(a)toad.com Chain: haystack;jam Subject: I urgently need a lot of money. Please share your money-making secrets, I am in a desperate need for cash.

5 5

Re: Pyramid schemes and cryptoanarchy
by Clay Olbon II 17 Dec '03

17 Dec '03

At 04:39 PM 11/10/96 -0500, Rabid Wombat wrote: >On Sun, 10 Nov 1996, Clay Olbon II wrote: > >> Pyramid schemes could be a growth market in a crypto-anarchic world. It is >> yet another market such as gambling, or the lottery, that could be conducted >> with anonymity. And it appears to be much more widespread on the internet > >How is it like gambling? If I get a pyramid letter instructing me to send >money to five people on the list, add my name to the bottom, send to 5 >people, or whatever, there's nothing stopping me from removing all the >names, adding my name and those of four friends, and passing the letter >along. With an anonymous system, I could easily be all five people, >without even the bother of getting five different post office boxes. I was not saying that chain letters are like gambling. My point was that they could be conducted with anonymity - like gambling and the lottery. Your other point is well made. Anyone have ideas on a protocol to prevent this problem? > >There's no gambling involved; only blantant stupidity. Agreed. Although I think gambling and the lottery are pretty stupid as well ("The lottery is a tax on people who are bad a math" - from a friend's .sig). >The "airplane" game was an interesting slant, though. Because of the >in-person "airplane" parties, people were able to make contacts and >network while participating. It was still the same old trick, but some >may have found the ability to "buy" (and "sell") face time worth the price >of admission (Some of the "airplane" games going around were to the tune >of $2500, rather than the usual $5). Your anonymous slant on >this removes the only economically viable excuse for participating, >though - I don't even get to meet the head of the umptysquat dept. in >return for getting fleeced. > >The "airplane game" was big around Washington about a year ago, and >involved a number of highly placed people who aught to have been able to >recognize a Ponzi scheme when it bit them in the ass. Makes me wonder how >many people are stupid enough to "play" these games. I'm not familiar with the airplane game. Sounds like a DNC fundraiser to me ;-) And yes, I think there are a lot of stupid people out there (ex. I started a new job recently and noticed that a warning about the "Good Times Virus" was posted on the bulletin board). I'm not sure that the game would even have to be close to fair for plenty of people to participate - especially if it involves digital cash and email, which may be much easier than snail-mailing letters. Clay ******************************************************* Clay Olbon clay.olbon(a)dynetics.com engineer, programmer, statistitian, etc. Dynetics, Inc. **********************************************tanstaafl

1 0

Re: Why is cryptoanarchy irreversible?
by ph＠netcom.com 17 Dec '03

17 Dec '03

At 12:34 PM 11/10/1996, Adam Back wrote: >Peter Hendrickson <ph(a)netcom.com> writes: >>At 3:30 AM 11/9/1996, Adam Back wrote: >>>Peter Hendrickson <ph(a)netcom.com> writes: >>>> Where will you keep your secret key? Remember, when they go through >>>> your house they bring 20 young graduates from MIT who are just dying >>>> to show how clever they are and save the world at the same time. >>> Keep your secret key in your head. >> I think this is hard to do in practice. I have tried. > You could probably keep a hashing function around plausibly, then you > could do as usual and remember the passphrase and use the hash > function to construct the actual key. 9 words selected from a pool of 25,000 has an entropy of about 131 bits. I could probably remember that. > If your stego techniques are any good, the feds will never get beyond > that point. They will then be left with the option of doing random > `spot-checks'. Having been on the cypherpunks list probably would > increase your chances of having your system checked. Yes, if things go sour, I doubt many cypherpunks will be practicing cryptoanarchists. >>> Your real challenge is keeping your stego programs safe. Boot >>> strapping a stegoed encrypted file system while leaving no stego code >>> lying around isn't that easy. >> Excellent point, especially since you don't have an encrypted virtual >> disk. Can anybody resolve this? >>> rc4 in C: >>> >>> #define S,t=s[i],s[i]=s[j],s[j]=t /* rc4 key <file */ >>> unsigned char s[256],i,j,t;main(c,v)char**v;{++v;while >>> (s[++i]=i);while(j+=s[i]+(*v)[i%strlen(*v)]S,++i);for( >>> j=0;c=~getchar();putchar(~c^s[t+=s[i]]))j+=s[++i]S;} >> (Under 3.3) I would have a hard time memorizing these programs. This >> pretty much guarantees that the number of cryptoanarchists will be small. > That program is optimised for size rather than ease of memorizing. > RC4 is an elegantly simple algorithm, and I sumbit that you could > remember it. Barring that you could just leave around a few > cypherpunks archives, or sci.crypt archives or whatever, and cut and > paste it form one of my posts :-) I am willing to accept that I can remember it. > Because RC4 is a stream cipher, you shouldn't reuse the key. However > you shouldn't need to for this application. You just use it to boot- > strap the real code. You are beginning to convince me. >> (I am deeply envious of your legal right to post this code, however. >> Now, why was it that we broke away from the Mother Country?) >> I would like to see a longer exposition of your approach. Given >> a hostile environment, how would I operate a small anonymous perl >> coding service using your techniques? > Once you've bootstrapped to your cryptoanarchists toolkit, you can > have anything you want, even a virtual TCP/IP layer, a hidden level of > TCP/IP in stego data. TCP/IP itself is a likely candidate for a stego > carrier. Non-predictable sequence nos are required to stop things > like the spoofing attack, and so are perfectly plausible. > Once we get to everyone having enough bandwidth, lots of people with > permanent connections, lots of people using video conference software, > audio, downloading feature length films, etc. there's no stopping > crypto anarchy. The LSbits in that lot would make a fairly responsive > subliminal channel by todays standards. I am finding this all very persuasive, although I am still suspicious of stegonagraphy. It would be cool to have an exact specification and working machine. This might even be easy enough to operate that non-technical people could learn how to do it, which implies that there could be large numbers of practicing cryptoanarchists. What we need is an experiment. Let's pick a country with a near police state and design a system so that people in that country can freely and securely communicate with each other and the outside world with minimal chance of arrest. Once the system is available, we can see if it succeeds in the field. I'll leave others to suggest the target. >> Don't forget to tell me how I get paid and when I get to spend my >> "ill-gotten" gains and how nobody will notice that I am doing it. > You get paid in ecash, paid on the BlackNet bank. You take a holiday > to a tax-haven and get paid off by a getting "lucky" at a BlackNet > affiliated casino. The casino takes a their "currency exchange fee", > and you get US$. Translations into paper currencies, I'll admit are > the weak link if you need paper currencies. > However there are two ways to get anonymous electronic cash, either > you start with anonymous electronic cash, or you add the anonymity > afterwards via `privacy brokers', once there are a few dozen systems, > and trillions flowing around using these systems, it's going to be > hard to keep track of it all. I still think the eventual payoff is a weak point, but it does make me think that in order to stop cryptoanarchy, foreign travel and foreign communication would have to be tightly controlled. If steganographic evidence is the only evidence that can be collected (and RC4 is strong) then it would be necessary to give the authorities great flexibility. Which means that it is beginning to look more and more like a bona fide police state as Tim suggested. While payment is a weak point, there are many cryptoanarchic activities that don't involve payment, such as participating in mailing lists, which people may like to do even when their governments disapprove. Anyway, you have certainly given me a lot to think about. I still have some doubts about safety from tempest attacks and the like, but my basic claim that you can stop cryptoanarchy without full deployment of a police state is looking weak to me right now. Peter Hendrickson ph(a)netcom.com

2 1

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

I operate a remailer pinging service which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, plus lots of interesting links to remailer-related resources, at: http://www.cs.berkeley.edu/~raph/remailer-list.html This information is used by premail, a remailer chaining and PGP encrypting client for outgoing mail. For more information, see: http://www.c2.org/~raph/premail.html For the PGP public keys of the remailers, finger pgpkeys(a)kiwi.cs.berkeley.edu This is the current info: REMAILER LIST This is an automatically generated listing of remailers. The first part of the listing shows the remailers along with configuration options and special features for each of the remailers. The second part shows the 12-day history, and average latency and uptime for each remailer. You can also get this list by fingering remailer-list(a)kiwi.cs.berkeley.edu. $remailer{"extropia"} = "<remail(a)miron.vip.best.com> cpunk pgp special"; $remailer{"mix"} = "<mixmaster(a)remail.obscura.com> cpunk mix pgp hash latent cut ek ksub reord ?"; $remailer{"replay"} = "<remailer(a)replay.com> cpunk mix pgp hash latent cut post ek"; $remailer{'alpha'} = '<alias(a)alpha.c2.org> alpha pgp'; $remailer{'nymrod'} = '<nymrod(a)nym.jpunix.com> alpha pgp'; $remailer{"lead"} = "<mix(a)zifi.genetics.utah.edu> cpunk mix pgp hash latent cut ek"; $remailer{"exon"} = "<remailer(a)remailer.nl.com> cpunk pgp hash latent cut ek"; $remailer{"haystack"} = "<haystack(a)holy.cow.net> cpunk mix pgp hash latent cut ek"; $remailer{"lucifer"} = "<lucifer(a)dhp.com> cpunk mix pgp hash latent cut ek"; $remailer{"jam"} = "<remailer(a)cypherpunks.ca> cpunk mix pgp hash latent cut ek"; $remailer{'nym'} = '<config(a)nym.alias.net> newnym pgp'; $remailer{"balls"} = "<remailer(a)huge.cajones.com> cpunk pgp hash latent cut ek"; $remailer{"squirrel"} = "<mix(a)squirrel.owl.de> cpunk mix pgp hash latent cut ek"; $remailer{"middle"} = "<middleman(a)jpunix.com> cpunk mix pgp hash middle latent cut ek reord ?"; $remailer{'cyber'} = '<alias(a)alias.cyberpass.net> alpha pgp'; $remailer{"dustbin"} = "<dustman(a)athensnet.com> cpunk pgp hash latent cut ek mix reord middle ?"; $remailer{'weasel'} = '<config(a)weasel.owl.de> newnym pgp'; $remailer{"death"} = "<x(a)deathsdoor.com> cpunk pgp hash latent post"; catalyst(a)netcom.com is _not_ a remailer. lmccarth(a)ducie.cs.umass.edu is _not_ a remailer. usura(a)replay.com is _not_ a remailer. remailer(a)crynwr.com is _not_ a remailer. There is no remailer at relay.com. Groups of remailers sharing a machine or operator: (cyber mix) (weasel squirrel) The alpha and nymrod nymservers are down due to abuse. However, you can use the cyber nymserver. The nym.alias.net server will be listed soon. See http://www.cs.berkeley.edu/~raph/n.a.n.html for details. 403 Permission denied errors have been caused by a flaky disk on the Berkeley WWW server. Hopefully, this is fixed by now. The penet remailer is closed. Last update: Mon 11 Nov 96 6:49:56 PST remailer email address history latency uptime ----------------------------------------------------------------------- jam remailer(a)cypherpunks.ca ******** *** 14:49 99.77% extropia remail(a)miron.vip.best.com -.--__..--- 17:21:56 99.28% balls remailer(a)huge.cajones.com * **+**- *** 7:35 99.23% cyber alias(a)alias.cyberpass.net + +*-- +** 39:50 99.18% replay remailer(a)replay.com +++* --- *** 22:22 98.78% dustbin dustman(a)athensnet.com - -- - -+ 1:18:14 98.56% haystack haystack(a)holy.cow.net ++#. + - *** 47:04 98.24% squirrel mix(a)squirrel.owl.de +----+-- +++ 2:15:31 97.94% middle middleman(a)jpunix.com +----- - 2:51:34 94.38% lead mix(a)zifi.genetics.utah.edu - +++-- +++ 42:54 93.75% lucifer lucifer(a)dhp.com ++ +++-- + + 56:13 89.49% mix mixmaster(a)remail.obscura.com +++-- -+ 1:10:46 84.64% exon remailer(a)remailer.nl.com ++# + - 10:34 43.55% History key * # response in less than 5 minutes. * * response in less than 1 hour. * + response in less than 4 hours. * - response in less than 24 hours. * . response in more than 1 day. * _ response came back too late (more than 2 days). cpunk A major class of remailers. Supports Request-Remailing-To: field. eric A variant of the cpunk style. Uses Anon-Send-To: instead. penet The third class of remailers (at least for right now). Uses X-Anon-To: in the header. pgp Remailer supports encryption with PGP. A period after the keyword means that the short name, rather than the full email address, should be used as the encryption key ID. hash Supports ## pasting, so anything can be put into the headers of outgoing messages. ksub Remailer always kills subject header, even in non-pgp mode. nsub Remailer always preserves subject header, even in pgp mode. latent Supports Matt Ghio's Latent-Time: option. cut Supports Matt Ghio's Cutmarks: option. post Post to Usenet using Post-To: or Anon-Post-To: header. ek Encrypt responses in reply blocks using Encrypt-Key: header. special Accepts only pgp encrypted messages. mix Can accept messages in Mixmaster format. reord Attempts to foil traffic analysis by reordering messages. Note: I'm relying on the word of the remailer operator here, and haven't verified the reord info myself. mon Remailer has been known to monitor contents of private email. filter Remailer has been known to filter messages based on content. If not listed in conjunction with mon, then only messages destined for public forums are subject to filtering. Raph Levien

1 0

RE: His and Her Anarchies
by jbugden＠smtplink.alis.ca 17 Dec '03

17 Dec '03

"Timothy C. May" <tcmay(a)got.net> wrote: >Well, I think there clearly _is_ a gender gap on these sorts of issues. Technologies that matter make daily life less obnoxious, and you can leverage them all the time. The Net is going to start mattering in a significant way when it relieves people of the burden of dealing with the garbage inherent in the information flow of everyday life. The net is going to matter when I can rely on it to store the information I now keep on disk, and the computer is a completely transparent object. All the documents that are important to me are maintained by the Net with sufficient reliability that I can unplug my computer and smash it with a hammer without affecting anything. Under this scenario, strong, reliable crypto becomes similar to electricity. The entire infomration infrastructure is built on it, but hardly anyone gives it a second thought. What kind of people use the Net and what are their activities doing to the country, the world, the culture? It may sound like a parochial issue that women don't much like computers, but they don't, and the issue is a tremendously important one. They're not attracted to this world, certainly not to the extent that men are, and that's one of the reasons why it is such a spiritually impoverished world. Most reasonable sophisticated men are happier in an environment that included women. One of the problems with the computer society is that not only is it an almost all-male society, but it's part of a little-boy society, part of an ongoing infantilization of the society over the past half century. Excerpt from Digerati: Encounters with the Cyber Elite (HardWired 1996) where David Gelernter, a Yale computer scientist, comments on the Web. >This may sound sexist. But sexism, like other "isms," is often based > on plain old truth, however politically incorrect it may be to some. >--Tim May Galileo, you must recant. You are in blatant disagreement with the truth. Ciao, James

4 3

Re: Pyramid Schemes
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

Benjamin Grosman <bgrosman(a)healey.com.au> writes: > this is all well and good, but what I'd like to know is: do these schemes > actually work? In theory they same to... In depends on what you mean by "work". If you're asking whether MMFs result in substantial amounts of money being sent to the originators, the answer is, I don't know for sure, but I doubt it very much. (I've never tried it myself but I interviewed a couple of people who did, for the research I did a few years ago.) Similar MLM schemes (such as Amway or Herbalife) seem to result in substantial profits for the owners/folks at the top of the pyramid, and losses to most people who join later, as the theory would predict. So why do so many people stay in programs like Amway despite their financial losses? In my opinion, _all memetic communications work very well not as a scheme for making money, but in the sense that people in the professions that involve person-to-person networking (such as public relations, recruiting, real estate and other sales) use them as a pretext to remind their business contacts of their existence. E.g. a headhunter might pass on copies of the Craig Shergold appeal to hundreds of potential recruits, with a note on his letterhead saying "I'm passing this on on behalf of the dying boy". Moreover he'd probably pass along photocopies of half a dozen letterheads from the chain of people who passed the memetic letter along to him. Most recipients reaction can be summarised as "What a nice person, what a good deed he's doing, do I need a headhunter now"? And by the way the reaction of the vast majority of Americans to a MMF snail letter is "I'm so grateful to the sender for passing along this business / networking opportunity." :-) which is why they're spread so eagerly by high school kids in search of popularity. I'm convinced that the good-luck chain letters (which just ask for the letter to be passed along, with no money changing hands) and the various MMF variants and MLM schemes are more about making/maintaining contacts than about money. Likewise most Amway/Herbalife peddlers lose money but gain the satisfaction of personal contact with the purchasers (which could be used for something else) and also the sales experience that they can later use to sell something else. How would Internet memetics be affected by wider availability of anonymity? We observe that snail mail anonymity is available now, but is apparently seldom used for memetics distribution. In the running example the p.r. person already has the ability to make hundreds of photocopies of the Craig Shergold letter and to snail-mail them to everyone s/he knows with no return address on the envelope and the cover letter. I've never come across such behavior, which is consistent with my belief that the sender is really interested in distributing his/her letterhead more than in distributing the memetic letter. When John Doe multi-posts the Craig Shergold's letter to thousands of Usenet newsgroups (as was done again a few weeks ago), s/he's more interested in splattering his own name around than in getting postcards/business cards to the dying boy. (Of course the poster's intent is to be widely seen as someone doing a good deed on behalf of Craig Shergold; instead he loses his Internet account and is widely viewed as a clueless spammer. Such is life. :-) At present someone could (ab)use the remailers to post anonymous Craig Shergold appeals on Usenet and on various mailing lists. I believe that one of the reasons why this has never been done (as far as I know) is because this would deprive the poster of the satisfaction of having his own name splattered all over the network. MMFs are a slightly different story because the poster can't get money from the "downline" without revealing some contact address to send the money to. Out of curisority, I looked at several different MMF spams that came this way; in many cases the sender's e-mail address is crudely forged; the money is requested to be sent to a postal address that's often a P.O.Box; and the name associated with the postal address is often missing, obviously phoney, or just has the initials. There's clearly interested in anonymity on the part of MMF posters.

1 0

Re: Movement Tracking Systems and Smartcards
by peter.allan＠aeat.co.uk 17 Dec '03

17 Dec '03

Date: Sat, 9 Nov 1996 11:23:29 -0800 From: "Timothy C. May" <tcmay(a)got.net> Subject: Movement Tracking Systems and Smartcards > helping to solve crimes. I expect the Big Three of credit-reporting > agencies are of course also in the loop....those movies where someone is > located because they foolishly used an ATM machine to get some cash or used > their credit card are not just fiction.) Exactly. I was interviewed over a terrorist double-murder in 1993 because of having used an ATM near the scene the same day. The fact that I did so AFTER the explosions by which time the terrorists would presumably be far away cut no ice. Nobody has been arrested for this AFAIK. They wanted to know which shops I'd bought what in so they could check said items were sold that day I suppose. As it seems nothing can be taken as read in some minds let me state I had nothing to do with that or other terrorist crimes. -- Peter Allan peter.allan(a)aeat.co.uk

1 0